Edit tour

Windows Analysis Report
https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-

Overview

General Information

Sample URL:	https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-
Analysis ID:	1647250
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2716 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2032 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5960 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6000 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /js/ HTTP/1.1Host: dd.blackhawknetwork.comConnection: keep-aliveContent-Length: 4242sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Accept: */*Origin: https://secure.rewardcodes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: AkamaiNetStorageContent-Length: 146Content-Type: text/htmlX-hfj-no-referrer-bad-date: yesETag: "724a89c93cef0abcc6285efcbdf45559:1557357075"Cache-Control: must-revalidate, privateDate: Mon, 24 Mar 2025 15:50:21 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 24 Mar 2025 15:50:27 GMTContent-Type: application/jsonContent-Length: 283Connection: closeAccept-Ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://secure.rewardcodes.comAccess-Control-Expose-Headers: *Cache-Control: no-cache, no-store, max-age=0, must-revalidateExpires: 0Pragma: no-cacheReferrer-Policy: no-referrerVary: OriginVary: Access-Control-Request-MethodVary: Access-Control-Request-HeadersX-Content-Type-Options: nosniffX-Datadome: protectedX-Frame-Options: DENYX-Set-Cookie: datadome=EzYFY2M9dpqG6lwgHqFCVv3Exnk_xWrYph8QTjjPuRq6Fwl0oDyV~Q1C~MM4qGt3flvG8fFxjzAC19dIX0RtM6tgpXOEW4QP043R99Lr0XL8Ihv7EEK9WhKPAtg_mGpT; Max-Age=31536000; Domain=.rewardcodes.com; Path=/; Secure; SameSite=LaxX-Xss-Protection: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8Content-Length: 49Connection: closeAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: GET, HEADAccess-Control-Max-Age: 3000Last-Modified: Mon, 25 Jun 2018 17:54:06 GMTx-amz-version-id: nullAccept-Ranges: bytesServer: AmazonS3Date: Mon, 24 Mar 2025 15:50:34 GMTCache-Control: public, max-age=300ETag: "328257380186d550f96adf638ff85092"X-Cache: Error from cloudfrontVia: 1.1 e9786b36047f45c75c77de67db1be0fc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK52-P9X-Amz-Cf-Id: XtcLN6y6sE3Nuv5jXpWqWTVah5isOjaJXu6TwYQ9RV2GXlJUDrHlYw==Age: 24

Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error
Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error
Source: chromecache_97.2.dr, chromecache_113.2.dr	String found in binary or memory: https://cookiepedia.co.uk/giving-consent-to-cookies
Source: chromecache_95.2.dr	String found in binary or memory: https://datadome.co
Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_132.2.dr	String found in binary or memory: https://ht.blackhawknetwork.com/assets/images/logo.png?l=$
Source: chromecache_120.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_120.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_154.2.dr, chromecache_101.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_154.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__.
Source: chromecache_101.2.dr, chromecache_92.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js
Source: chromecache_97.2.dr, chromecache_113.2.dr	String found in binary or memory: https://www.tangocard.com/legal/privacy-notice#cookie-policy

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.4:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.57.146.100:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.57.146.100:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.114:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.229:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.103.192:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.55.68:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.114:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.114:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.55.68:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.167.92.163:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.55.129:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.167.92.163:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.116.159.121:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.67.9:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.67.9:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.223.63.250:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.238.163.91:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.72:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.9:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.9:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.223.63.250:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.72:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.80.36:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.72:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.80.16:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.19:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.34.19:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.34.43:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.38:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.38:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.87.42:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.19:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.87.42:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.155.119:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.87.42:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.87.42:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.32.137:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.86.140:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.63.75:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.9:443 -> 192.168.2.4:49849 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2716_1378327375

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2716_1378327375

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@27/125@66/30

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2032 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5960 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6000 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2032 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5960 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2000,i,13286284280905524223,6070468238322640045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6000 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://d30s7yzk2az89n.cloudfront.net/images/brands/b422615-300w-326ppi.png	0%	Avira URL Cloud	safe
https://www.tangocard.com/legal/privacy-notice#cookie-policy	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
secure.rewardcodes.com	3.168.122.114	true	false	high
jsdelivr.map.fastly.net	151.101.193.229	true	false	high
auth.split.io	3.223.63.250	true	false	high
d-52ccktk4i3.execute-api.us-east-2.amazonaws.com	18.116.159.121	true	false	high
tangocard-gr.ada.support	18.164.124.38	true	false	high
split.map.fastly.net	151.101.67.9	true	false	high
91995e21784f3b8def0ca7516236b084-1292300468.us-west-2.elb.amazonaws.com	35.167.92.163	true	false	unknown
d30s7yzk2az89n.cloudfront.net	18.238.80.36	true	false	high
rollout.ada.support	13.226.34.19	true	false	high
static.ada.support	3.168.122.72	true	false	high
d296je7bbdd650.cloudfront.net	13.249.86.140	true	false	high
codes.rewardcodes.com	13.57.146.100	true	false	high
www.google.com	142.251.35.164	true	false	high
e7100.g.akamaiedge.net	173.222.103.192	true	false	high
dd.blackhawknetwork.com.first-party-js.datadome.co	18.238.55.68	true	false	high
cdn.cookielaw.org	104.18.87.42	true	false	high
geolocation.onetrust.com	172.64.155.119	true	false	high
ddv9nt6v6rf1j.cloudfront.net	13.225.63.75	true	false	high
cloud.typography.com	unknown	unknown	false	high
ht.blackhawknetwork.com	unknown	unknown	false	high
sdk.split.io	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
api.rewardcodes.com	unknown	unknown	false	high
cdn.segment.com	unknown	unknown	false	high
dd.blackhawknetwork.com	unknown	unknown	false	high
streaming.split.io	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sdk.split.io/api/splitChanges?s=1.1&since=-1&names=RL-3321-mobile-wallet-tokenization,RL-3324-apple-wallet-button,RL-3324-google-wallet-button,RL-3450-decouple-LPE-unlock,RL-3462-iframe-token-request,RL_2970_TANGO_OPEN_LOOP_PRODUCT_TRANSACTION_TABLE,landing-page-static-frontend-maintenance,rx-enable-lpe-cookie-blocking	false		high
https://secure.rewardcodes.com/	false		high
https://static.ada.support/embed2.js	false		high
https://tangocard-gr.ada.support/embed/button/bccfc08/preact.196e0b6fbd52fd7d5136.js	false		high
https://secure.rewardcodes.com/favicon.ico	false		high
https://cdn.cookielaw.org/scripttemplates/202301.1.0/assets/otCommonStyles.css	false		high
https://tangocard-gr.ada.support/embed/button/bccfc08/index.html	false		high
https://rollout.ada.support/tangocard-gr/client.json?ada_request_origin=embed	false		high
https://cloud.typography.com/7328892/6300172/css/fonts.css	false		high
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location	false		high
https://cdn.cookielaw.org/logos/static/powered_by_logo.svg	false		high
https://sdk.split.io/api/mySegments/landing-page-anonymous-user	false		high
https://secure.rewardcodes.com/js/landing-page.d412d90d.js	false		high
https://cdn.cookielaw.org/consent/a36d8256-0924-4efb-b454-fa3589708257/a36d8256-0924-4efb-b454-fa3589708257.json	false		high
https://static.ada.support/embed-manifest.json	false		high
https://static.ada.support/images/0e5abac0-205b-4ff0-b1d4-cca242c0636a.svg	false		high
https://secure.rewardcodes.com/css/chunk-vendors.97869380.css	false		high
https://auth.split.io/api/v2/auth?s=1.1&users=landing-page-anonymous-user	false		high
https://tangocard-gr.ada.support/embed/x-storage/bccfc08/index.js	false		high
https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg	false		high
https://secure.rewardcodes.com/#/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-	false		high
https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-	false		high
https://secure.rewardcodes.com/css/landing-page.a4acc4ba.css	false		high
https://tangocard-gr.ada.support/embed/x-storage/bccfc08/sentry.a63f1776e32d39b6c2e8.js	false		high
https://sdk.split.io/api/splitChanges?s=1.1&since=1732652570979&names=LPE-unboxing,RL-3574-banner-ad	false		high
https://dd.blackhawknetwork.com/tags.js	false		high
https://auth.split.io/api/v2/auth?s=1.1&users=P-b54d92e49c0200d524d772a5d5b451ec	false		high
https://tangocard-gr.ada.support/embed/button/bccfc08/index.js	false		high
https://cdn.cookielaw.org/consent/a36d8256-0924-4efb-b454-fa3589708257/018f5944-1aff-77a4-bde2-fab6ae830b44/en.json	false		high
https://sdk.split.io/api/splitChanges?s=1.1&since=-1&names=LPE-unboxing,RL-3574-banner-ad	false		high
https://ht.blackhawknetwork.com/assets/cmV3YXJkY29kZXMuY29t	false		high
https://static.ada.support/chat-manifest.json	false		high
https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css	false		high
https://cdn.segment.com/analytics.js/v1/[object%20Object]/analytics.min.js	false		high
https://secure.rewardcodes.com/css/app.a2069f08.css	false		high
https://dd.blackhawknetwork.com/js/	false		high
https://api.rewardcodes.com/r2/1/rewards/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-/brand/en_US	false		high
https://www.google.com/recaptcha/api.js?render=6LeR7NMaAAAAAHwbklBPvfEvkC1aL2sfeeEDXE8s&badge=bottomleft	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI	false		high
https://sdk.split.io/api/splitChanges?s=1.1&since=1716570244257&names=RL-3321-mobile-wallet-tokenization,RL-3324-apple-wallet-button,RL-3324-google-wallet-button,RL-3450-decouple-LPE-unlock,RL-3462-iframe-token-request,RL_2970_TANGO_OPEN_LOOP_PRODUCT_TRANSACTION_TABLE,landing-page-static-frontend-maintenance,rx-enable-lpe-cookie-blocking	false		high
https://cdn.cookielaw.org/scripttemplates/202301.1.0/otBannerSdk.js	false		high
https://secure.rewardcodes.com/js/app.36ab3fdf.js	false		high
https://d30s7yzk2az89n.cloudfront.net/images/brands/b422615-300w-326ppi.png	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/202301.1.0/assets/otFlat.json	false		high
https://secure.rewardcodes.com/js/chunk-vendors.a86487ae.js	false		high
https://tangocard-gr.ada.support/embed/x-storage/bccfc08/index.html	false		high
https://sdk.split.io/api/mySegments/P-b54d92e49c0200d524d772a5d5b451ec	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeR7NMaAAAAAHwbklBPvfEvkC1aL2sfeeEDXE8s&co=aHR0cHM6Ly9zZWN1cmUucmV3YXJkY29kZXMuY29tOjQ0Mw..&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&badge=bottomleft&cb=eqzkzgwxypgl	false		high
https://cdn.cookielaw.org/logos/static/ot_company_logo.png	false		high
https://api.rewardcodes.com/r2/1/rewards/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-/reward/view	false		high
https://static.ada.support/embed2.bccfc08.js	false		high
https://cdn.cookielaw.org/scripttemplates/202301.1.0/assets/v2/otPcPanel.json	false		high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false		high
https://tangocard-gr.ada.support/embed/button/bccfc08/sentry.a63f1776e32d39b6c2e8.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://support.google.com/recaptcha#6262736	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://cloud.google.com/contact	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://datadome.co	chromecache_95.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_154.2.dr, chromecache_101.2.dr, chromecache_120.2.dr	false		high
https://support.google.com/recaptcha	chromecache_120.2.dr	false		high
https://cookiepedia.co.uk/giving-consent-to-cookies	chromecache_97.2.dr, chromecache_113.2.dr	false		high
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://ht.blackhawknetwork.com/assets/images/logo.png?l=$	chromecache_132.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_120.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__.	chromecache_154.2.dr, chromecache_120.2.dr	false		high
https://www.tangocard.com/legal/privacy-notice#cookie-policy	chromecache_97.2.dr, chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.238.80.36	d30s7yzk2az89n.cloudfront.net	United States	16509	AMAZON-02US	false
13.226.34.19	rollout.ada.support	United States	16509	AMAZON-02US	false
18.116.159.121	d-52ccktk4i3.execute-api.us-east-2.amazonaws.com	United States	3	MIT-GATEWAYSUS	false
18.238.80.16	unknown	United States	16509	AMAZON-02US	false
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
13.249.86.140	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
3.168.122.114	secure.rewardcodes.com	United States	16509	AMAZON-02US	false
173.222.103.192	e7100.g.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
104.18.32.137	unknown	United States	13335	CLOUDFLARENETUS	false
18.238.55.129	unknown	United States	16509	AMAZON-02US	false
18.164.124.38	tangocard-gr.ada.support	United States	3	MIT-GATEWAYSUS	false
18.238.55.68	dd.blackhawknetwork.com.first-party-js.datadome.co	United States	16509	AMAZON-02US	false
104.18.87.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
3.223.63.250	auth.split.io	United States	14618	AMAZON-AESUS	false
142.250.80.100	unknown	United States	15169	GOOGLEUS	false
44.238.163.91	unknown	United States	16509	AMAZON-02US	false
3.168.122.19	unknown	United States	16509	AMAZON-02US	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
35.167.92.163	91995e21784f3b8def0ca7516236b084-1292300468.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.67.9	split.map.fastly.net	United States	54113	FASTLYUS	false
151.101.195.9	unknown	United States	54113	FASTLYUS	false
13.226.34.43	unknown	United States	16509	AMAZON-02US	false
142.250.65.164	unknown	United States	15169	GOOGLEUS	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false
13.57.146.100	codes.rewardcodes.com	United States	16509	AMAZON-02US	false
151.101.131.9	unknown	United States	54113	FASTLYUS	false
3.168.122.72	static.ada.support	United States	16509	AMAZON-02US	false
13.225.63.75	ddv9nt6v6rf1j.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647250
Start date and time:	2025-03-24 16:49:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@27/125@66/30
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.81.238, 142.251.41.3, 142.251.41.14, 172.253.115.84, 142.250.65.238, 142.251.40.110, 142.250.80.78, 142.250.65.170, 142.250.176.195, 199.232.210.172, 23.203.176.221, 142.251.35.163, 142.250.64.106, 142.250.80.74, 142.250.80.42, 142.251.32.106, 142.251.40.234, 142.250.176.202, 142.250.65.234, 142.250.80.106, 172.217.165.138, 142.251.40.202, 142.251.41.10, 142.250.72.106, 142.250.80.10, 142.250.65.202, 142.250.81.234, 142.250.81.227, 142.250.80.67, 142.250.80.46, 142.250.65.174, 142.250.176.206, 142.251.32.110, 142.251.40.195, 142.251.40.163, 184.31.69.3, 20.109.210.53
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5406
Entropy (8bit):	5.000221766082792
Encrypted:	false
SSDEEP:	96:npyIG740wU9xClp7GKGa6AymNPNArXNVoNcjAjIjJjMZZ24+F:FRMxClp16v2VA5+sIwJEHc
MD5:	593BBCB7136F22DDD6501F7468F5DDCE
SHA1:	A9C688D01EC5620A6FBABD975CB7253CDFAC3673
SHA-256:	5AA86BAC4948063D19D70FC1B95F79D2BF108BDDE2A2C97F5AD4795BA1052901
SHA-512:	2DC7F59DD574DE7B3EAB27DEF98559AA4DF965EC6B5FC94B4963C19CFD04A9CE874014BDA6326493DF8DACCA7381D82D6230300D2035E55B89A548180E6EC585
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/a36d8256-0924-4efb-b454-fa3589708257/a36d8256-0924-4efb-b454-fa3589708257.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202301.1.0","OptanonDataJSON":"a36d8256-0924-4efb-b454-fa3589708257","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018f5944-1aff-77a4-bde2-fab6ae830b44","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","sb","bq","sc","bs","sd","bt","bv","sg","sh","bw","sj","by","bz","sl","sn","so","ca","sr","cc","ss","st","cd","sv","cf","cg","sx","ch","ci","sy","sz","ck","cl","cm","cn","co","tc","cr","td","cu","tf","cv","tg","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","dj","t

Source: https://secure.rewardcodes.com/#/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-	Joe Sandbox AI: Score: 8 Reasons: The brand 'TJMaxx' is a well-known retail brand., The legitimate domain for TJMaxx is 'tjmaxx.com'., The URL 'secure.rewardcodes.com' does not match the legitimate domain for TJMaxx., The domain 'rewardcodes.com' is generic and not directly associated with TJMaxx., The presence of 'secure' as a subdomain is often used in phishing attempts to create a false sense of security., The input field 'Security Code' is often used in phishing sites to collect sensitive information. DOM: 0.1.pages.csv
Source: https://secure.rewardcodes.com/#/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-	Joe Sandbox AI: Score: 8 Reasons: The brand 'Marshalls' is a well-known retail brand., The URL 'secure.rewardcodes.com' does not match the legitimate domain 'marshalls.com'., The domain 'rewardcodes.com' is generic and not directly associated with Marshalls., The presence of 'secure' as a subdomain is often used in phishing attempts to create a false sense of security., The input field 'Security Code' is often targeted in phishing attempts to collect sensitive information. DOM: 0.5.pages.csv

Source: https://secure.rewardcodes.com/#/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-	HTTP Parser: No favicon
Source: https://secure.rewardcodes.com/#/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: codes.rewardcodes.com
Source: global traffic	DNS traffic detected: DNS query: secure.rewardcodes.com
Source: global traffic	DNS traffic detected: DNS query: cloud.typography.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: dd.blackhawknetwork.com
Source: global traffic	DNS traffic detected: DNS query: api.rewardcodes.com
Source: global traffic	DNS traffic detected: DNS query: ht.blackhawknetwork.com
Source: global traffic	DNS traffic detected: DNS query: sdk.split.io
Source: global traffic	DNS traffic detected: DNS query: auth.split.io
Source: global traffic	DNS traffic detected: DNS query: static.ada.support
Source: global traffic	DNS traffic detected: DNS query: d30s7yzk2az89n.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: rollout.ada.support
Source: global traffic	DNS traffic detected: DNS query: tangocard-gr.ada.support
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: streaming.split.io

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 24, 2025 16:50:13.585695982 CET	53	62245	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:13.595033884 CET	53	63550	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:14.167052984 CET	53	63743	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:14.318135977 CET	53	64724	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:17.637897015 CET	49705	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:17.638040066 CET	57324	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:17.747823000 CET	53	49705	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:17.749000072 CET	53	57324	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:18.975858927 CET	63741	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:18.976269960 CET	58947	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:19.084670067 CET	53	58947	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:19.085827112 CET	53	63741	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:19.834791899 CET	62193	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:19.834933996 CET	57015	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:19.943552971 CET	53	57015	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:19.951092958 CET	53	62193	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:20.833355904 CET	61880	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:20.833425999 CET	59549	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:20.834547997 CET	50103	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:20.834692001 CET	58810	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:20.837703943 CET	55132	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:20.837852001 CET	51865	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:20.940448999 CET	53	59549	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:20.942060947 CET	53	51458	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:20.942567110 CET	53	61880	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:20.943592072 CET	53	50103	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:20.943814039 CET	53	58810	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:20.951894045 CET	53	51865	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:20.954523087 CET	53	55132	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:22.362622023 CET	58923	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:22.362891912 CET	53579	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:22.479245901 CET	53	53579	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:22.506135941 CET	53	58923	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:22.956363916 CET	59283	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:22.956465960 CET	59870	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:23.066157103 CET	53	59870	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:23.071163893 CET	53	59283	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:23.443449974 CET	54221	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:23.443581104 CET	65519	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:23.552117109 CET	53	54221	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:23.561676025 CET	53	65519	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:24.007704020 CET	64531	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:24.007922888 CET	50386	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:24.009196043 CET	52214	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:24.009387970 CET	51052	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:24.014132977 CET	52602	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:24.014303923 CET	53057	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:24.119059086 CET	53	52214	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:24.119098902 CET	53	51052	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:24.124721050 CET	53	53057	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:24.124761105 CET	53	52602	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:24.127736092 CET	53	64531	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:24.151185036 CET	53	50386	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:24.461899996 CET	61816	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:24.462052107 CET	55622	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:24.577531099 CET	53	61816	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:24.611975908 CET	53	55622	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:25.028110981 CET	53230	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.028244019 CET	50217	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.072910070 CET	54475	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.073142052 CET	58015	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.134418011 CET	53	53230	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:25.136713028 CET	53	50217	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:25.181530952 CET	53	54475	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:25.182099104 CET	53	58015	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:25.940249920 CET	55454	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.940624952 CET	52182	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.995070934 CET	55815	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.995342016 CET	64571	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.996354103 CET	59565	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:25.996543884 CET	56210	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:26.047748089 CET	53	55454	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.047775030 CET	53	52182	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.102124929 CET	53	55815	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.102778912 CET	53	64571	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.106147051 CET	53	56210	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.170336008 CET	53	59565	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.789259911 CET	53	58599	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.797377110 CET	65095	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:26.797564983 CET	49208	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:26.908318996 CET	53	49208	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.967983007 CET	53	65095	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:26.987193108 CET	56545	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:26.987472057 CET	62487	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:27.093250036 CET	53	62487	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:27.094067097 CET	53	56545	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:27.663984060 CET	65061	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:27.664186954 CET	58456	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:27.735605955 CET	53	61465	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:27.772381067 CET	53	58456	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:27.773333073 CET	53	65061	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:27.947273970 CET	59747	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:27.947417021 CET	59215	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:28.055428982 CET	53	59747	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:28.056112051 CET	53	59215	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:28.242897034 CET	50968	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:28.243029118 CET	61048	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:28.267184973 CET	60198	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:28.267328978 CET	61264	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:28.345688105 CET	53	61048	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:28.372986078 CET	53	61264	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:28.378397942 CET	53	50968	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:28.381623030 CET	53	60198	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:28.660494089 CET	53	63185	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:29.495583057 CET	54064	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:29.495718002 CET	60149	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:29.508204937 CET	62916	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:29.508388996 CET	65281	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:29.598181963 CET	53	54064	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:29.598669052 CET	53	60149	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:29.611332893 CET	53	62916	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:29.612592936 CET	53	65281	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:30.693783998 CET	53	56121	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:30.731875896 CET	51045	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:30.732026100 CET	55289	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:30.835551023 CET	53	55289	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:30.836379051 CET	53	51045	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:30.998065948 CET	64663	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:30.998260975 CET	64601	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:31.103418112 CET	53	64601	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:31.104321003 CET	53	64663	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:31.336101055 CET	53	54903	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:31.346168041 CET	54298	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:31.346481085 CET	50001	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:31.449620008 CET	53	54298	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:31.450805902 CET	53	50001	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:33.620378017 CET	52957	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:33.620529890 CET	54414	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:50:33.727914095 CET	53	54414	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:33.727961063 CET	53	52957	1.1.1.1	192.168.2.4
Mar 24, 2025 16:50:50.213226080 CET	53	58187	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:13.055094004 CET	53	58217	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:13.056780100 CET	53	49741	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:16.134893894 CET	53	55671	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:20.816783905 CET	138	138	192.168.2.4	192.168.2.255
Mar 24, 2025 16:51:25.076910973 CET	57282	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:51:25.077204943 CET	52185	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:51:25.184056997 CET	53	52185	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:25.184381008 CET	53	57282	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:25.620137930 CET	61779	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:51:25.620393991 CET	52579	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:51:25.725809097 CET	53	61779	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:25.726098061 CET	53	52579	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:26.139636040 CET	58463	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:51:26.139776945 CET	63275	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:51:26.247119904 CET	53	58463	1.1.1.1	192.168.2.4
Mar 24, 2025 16:51:26.249183893 CET	53	63275	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Mar 24, 2025 16:50:26.175116062 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 16:50:26.277884960 CET	223	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 15:19:48 GMT Expires: Mon, 24 Mar 2025 16:09:48 GMT Age: 1838 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 24, 2025 16:50:26.284427881 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 16:50:26.381459951 CET	223	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 15:10:24 GMT Expires: Mon, 24 Mar 2025 16:00:24 GMT Age: 2402 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:19 UTC	740	OUT	GET /r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1- HTTP/1.1 Host: codes.rewardcodes.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:19 UTC	906	IN	HTTP/1.1 302 Found Date: Mon, 24 Mar 2025 15:50:19 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=8vlndPEPOh/HAII/qPRoCOZWIvMd3wLvjsCJGIqp/RhXqgTj2XGNPVzFyIyE5cZASTJgv8nWUdn+w9q1PnJaIgKj/i9Q9nNm9WA8F33CreXrjpvD1PtSQd04798V; Expires=Mon, 31 Mar 2025 15:50:19 GMT; Path=/ Set-Cookie: AWSALBCORS=8vlndPEPOh/HAII/qPRoCOZWIvMd3wLvjsCJGIqp/RhXqgTj2XGNPVzFyIyE5cZASTJgv8nWUdn+w9q1PnJaIgKj/i9Q9nNm9WA8F33CreXrjpvD1PtSQd04798V; Expires=Mon, 31 Mar 2025 15:50:19 GMT; Path=/; SameSite=None; Secure Location: https://secure.rewardcodes.com:443/#/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1- Pragma: no-cache Expires: 0 X-Robots-Tag: noindex, nofollow Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 0 Referrer-Policy: no-referrer

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:20 UTC	672	OUT	GET / HTTP/1.1 Host: secure.rewardcodes.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:20 UTC	813	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 3179 Connection: close Date: Mon, 24 Mar 2025 15:50:21 GMT Last-Modified: Mon, 27 Jan 2025 20:42:07 GMT ETag: "6bfe29010809c2f32224e13218b8d5d2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate X-Robots-Tag: noindex, nofollow X-Frame-Options: ALLOWA X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin X-Cache: Miss from cloudfront Via: 1.1 d3a3a5c0949462849856f4aca1fd42ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: VShpT3eyOUVtyrArs4pe7J7C-XxCGtxQ_lIDEf3e466W_Q6_wSldLg==
2025-03-24 15:50:20 UTC	3179	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 20 28 61 2c 20 62 2c 20 63 2c 20 64 2c 20 65 2c 20 66 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 61 2e 64 64 6a 73 6b 65 79 20 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 61 2e 64 64 6f 70 74 69 6f 6e 73 20 3d 20 66 20 7c 7c 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 20 3d 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 29 2c 20 6e 20 3d 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 63 29 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 2e 61 73 79 6e 63 20 3d 20 31 2c 20 6d 2e 73 72 63 20 3d 20 64 2c 20 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e Data Ascii: <!doctype html><html lang="en"><head><script>!function (a, b, c, d, e, f) { a.ddjskey = e; a.ddoptions = f \|\| null; var m = b.createElement(c), n = b.getElementsByTagName(c)[0]; m.async = 1, m.src = d, n.parentNode.

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:21 UTC	538	OUT	GET /css/chunk-vendors.97869380.css HTTP/1.1 Host: secure.rewardcodes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:21 UTC	814	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 343346 Connection: close Date: Mon, 24 Mar 2025 15:50:22 GMT Last-Modified: Mon, 27 Jan 2025 20:42:06 GMT ETag: "c39af8c756152526947f8e4c3fd4e7f0" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate X-Robots-Tag: noindex, nofollow X-Frame-Options: ALLOWA X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin X-Cache: Miss from cloudfront Via: 1.1 016366850df5bc60b2d7b78769c14606.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: idifeGhWFT6Cu9TKG2B_6L5MHfWOBXdUBO3D3modu9wZxeG5dYlz1g==
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 2e 74 68 65 6d 65 2d 2d 6c 69 67 68 74 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 37 29 7d 2e 74 68 65 6d 65 2d 2d 6c 69 67 68 74 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 74 65 78 74 2d 2d 70 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 37 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 68 65 6d 65 2d 2d 6c 69 67 68 74 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 74 65 78 74 2d 2d 73 65 63 6f 6e 64 61 72 79 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 36 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 68 65 6d 65 2d 2d 6c 69 67 68 74 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 74 65 78 74 2d 2d 64 69 73 Data Ascii: .theme--light.v-application{background:#fff;color:rgba(0,0,0,.87)}.theme--light.v-application .text--primary{color:rgba(0,0,0,.87)!important}.theme--light.v-application .text--secondary{color:rgba(0,0,0,.6)!important}.theme--light.v-application .text--dis
2025-03-24 15:50:21 UTC	628	IN	Data Raw: 33 33 33 33 25 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 6c 74 72 20 2e 66 6c 65 78 2e 6f 66 66 73 65 74 2d 78 6c 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 72 74 6c 20 2e 66 6c 65 78 2e 6f 66 66 73 65 74 2d 78 6c 36 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 30 25 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 6c 74 72 20 2e 66 6c 65 78 2e 6f 66 66 73 65 74 2d 78 6c 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 72 74 6c 20 2e 66 6c 65 78 2e 6f 66 66 73 65 74 2d 78 6c 35 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e Data Ascii: 3333%}.v-application--is-ltr .flex.offset-xl6{margin-left:50%}.v-application--is-rtl .flex.offset-xl6{margin-right:50%}.v-application--is-ltr .flex.offset-xl5{margin-left:41.6666666667%}.v-application--is-rtl .flex.offset-xl5{margin-right:41.6666666667%}.
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 36 36 36 36 36 36 37 25 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 6c 74 72 20 2e 66 6c 65 78 2e 6f 66 66 73 65 74 2d 78 6c 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 72 74 6c 20 2e 66 6c 65 78 2e 6f 66 66 73 65 74 2d 78 6c 31 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 6c 74 72 20 2e 66 6c 65 78 2e 6f 66 66 73 65 74 2d 78 6c 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 72 74 6c 20 2e 66 6c 65 78 2e 6f 66 66 73 65 74 2d 78 6c 30 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 7d 2e 63 68 Data Ascii: 6666667%}.v-application--is-ltr .flex.offset-xl1{margin-left:8.3333333333%}.v-application--is-rtl .flex.offset-xl1{margin-right:8.3333333333%}.v-application--is-ltr .flex.offset-xl0{margin-left:0}.v-application--is-rtl .flex.offset-xl0{margin-right:0}}.ch
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 66 66 38 61 38 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 72 65 64 2e 61 63 63 65 6e 74 2d 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 35 32 35 32 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 35 32 35 32 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 72 65 64 2d 2d 74 65 78 74 2e 74 65 78 74 2d 2d 61 63 63 65 6e 74 2d 32 7b 63 6f 6c 6f 72 3a 23 66 66 35 32 35 32 21 69 6d 70 6f 72 74 61 6e 74 3b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 66 66 35 32 35 32 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 72 65 64 2e 61 63 63 65 6e Data Ascii: important;caret-color:#ff8a80!important}.v-application .red.accent-2{background-color:#ff5252!important;border-color:#ff5252!important}.v-application .red--text.text--accent-2{color:#ff5252!important;caret-color:#ff5252!important}.v-application .red.accen
2025-03-24 15:50:21 UTC	2048	IN	Data Raw: 72 3a 23 38 30 64 38 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 6c 69 67 68 74 2d 62 6c 75 65 2d 2d 74 65 78 74 2e 74 65 78 74 2d 2d 61 63 63 65 6e 74 2d 31 7b 63 6f 6c 6f 72 3a 23 38 30 64 38 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 38 30 64 38 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 6c 69 67 68 74 2d 62 6c 75 65 2e 61 63 63 65 6e 74 2d 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 30 63 34 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 30 63 34 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 6c 69 67 68 74 2d 62 6c 75 65 2d 2d 74 65 78 Data Ascii: r:#80d8ff!important}.v-application .light-blue--text.text--accent-1{color:#80d8ff!important;caret-color:#80d8ff!important}.v-application .light-blue.accent-2{background-color:#40c4ff!important;border-color:#40c4ff!important}.v-application .light-blue--tex
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 30 61 63 63 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 63 79 61 6e 2e 64 61 72 6b 65 6e 2d 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 39 37 61 37 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 39 37 61 37 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 63 79 61 6e 2d 2d 74 65 78 74 2e 74 65 78 74 2d 2d 64 61 72 6b 65 6e 2d 32 7b 63 6f 6c 6f 72 3a 23 30 30 39 37 61 37 21 69 6d 70 6f 72 74 61 6e 74 3b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 30 30 39 37 61 37 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 63 79 61 6e 2e 64 61 72 6b 65 6e 2d 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: 0acc1!important}.v-application .cyan.darken-2{background-color:#0097a7!important;border-color:#0097a7!important}.v-application .cyan--text.text--darken-2{color:#0097a7!important;caret-color:#0097a7!important}.v-application .cyan.darken-3{background-color:
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 63 6f 6c 6f 72 3a 23 66 66 61 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 61 6d 62 65 72 2d 2d 74 65 78 74 2e 74 65 78 74 2d 2d 64 61 72 6b 65 6e 2d 32 7b 63 6f 6c 6f 72 3a 23 66 66 61 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 66 66 61 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 61 6d 62 65 72 2e 64 61 72 6b 65 6e 2d 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 38 66 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 38 66 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 Data Ascii: color:#ffa000!important;border-color:#ffa000!important}.v-application .amber--text.text--darken-2{color:#ffa000!important;caret-color:#ffa000!important}.v-application .amber.darken-3{background-color:#ff8f00!important;border-color:#ff8f00!important}.v-app
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 30 2c 30 2c 30 2c 2e 31 32 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 65 6c 65 76 61 74 69 6f 6e 2d 32 30 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 30 70 78 20 31 33 70 78 20 2d 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 32 30 70 78 20 33 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 38 70 78 20 33 38 70 78 20 37 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 65 6c 65 76 61 74 69 6f 6e 2d 31 39 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 39 70 78 20 31 32 70 78 20 2d 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 31 39 70 78 20 32 39 70 78 20 32 70 78 20 72 67 Data Ascii: 0,0,0,.12)!important}.v-application .elevation-20{box-shadow:0 10px 13px -6px rgba(0,0,0,.2),0 20px 31px 3px rgba(0,0,0,.14),0 8px 38px 7px rgba(0,0,0,.12)!important}.v-application .elevation-19{box-shadow:0 9px 12px -6px rgba(0,0,0,.2),0 19px 29px 2px rg
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 65 2d 63 65 6c 6c 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 64 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 66 6c 6f 61 74 2d 6e 6f 6e 65 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 66 6c 6f 61 74 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 66 Data Ascii: e-cell{display:table-cell!important}.v-application .d-flex{display:flex!important}.v-application .d-inline-flex{display:inline-flex!important}.v-application .float-none{float:none!important}.v-application .float-left{float:left!important}.v-application .f
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 6d 79 2d 6e 31 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 6d 79 2d 6e 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 20 2e 6d 79 2d 6e 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 Data Ascii: !important}.v-application .my-n1{margin-top:-4px!important;margin-bottom:-4px!important}.v-application .my-n2{margin-top:-8px!important;margin-bottom:-8px!important}.v-application .my-n3{margin-top:-12px!important;margin-bottom:-12px!important}.v-applicat

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:21 UTC	528	OUT	GET /css/app.a2069f08.css HTTP/1.1 Host: secure.rewardcodes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:21 UTC	812	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 5538 Connection: close Date: Mon, 24 Mar 2025 15:50:22 GMT Last-Modified: Mon, 27 Jan 2025 20:42:06 GMT ETag: "1e9f01d7ce31f3d9f02a87ad8f971b4e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate X-Robots-Tag: noindex, nofollow X-Frame-Options: ALLOWA X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin X-Cache: Miss from cloudfront Via: 1.1 bf49868a84302f57b8f20d68a5a57812.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: jWA8NU0sP7QYOJ-ZuKZxB_T83iwrDprwuGeijMWhTv3DBSQ7xLSDhw==
2025-03-24 15:50:21 UTC	5538	IN	Data Raw: 2e 66 6f 6f 74 65 72 2d 6c 69 6e 6b 73 5b 64 61 74 61 2d 76 2d 61 62 62 36 65 39 34 36 5d 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 32 70 78 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 66 6f 6f 74 65 72 2d 6c 69 6e 6b 73 5b 64 61 74 61 2d 76 2d 61 62 62 36 65 39 34 36 5d 7b 70 61 64 64 69 6e 67 3a 30 20 32 34 70 78 20 30 20 30 7d 7d 2e 75 6e 62 6f 78 69 6e 67 2d 6c 69 6e 6b 73 5b 64 61 74 61 2d 76 2d 61 62 62 36 65 39 34 36 5d 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 75 6e 62 6f 78 69 6e 67 2d 6c 69 6e 6b 73 5b 64 61 74 61 2d 76 2d 61 62 62 36 65 39 34 36 5d 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 Data Ascii: .footer-links[data-v-abb6e946]{padding-left:32px}@media(max-width:1024px){.footer-links[data-v-abb6e946]{padding:0 24px 0 0}}.unboxing-links[data-v-abb6e946]{text-decoration:none;text-align:right!important}.unboxing-links[data-v-abb6e946]:hover{text-decor

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1568), with no line terminators
Category:	downloaded
Size (bytes):	1568
Entropy (8bit):	5.802126974056997
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccA7fnHs+KVCe2TL08gFGb1gpCfdcl/1t4glvllLtPy4w1hezsLqoa:VKEc+nfKo7dJ+CytX7o1E4LrwUnG
MD5:	6DAF7BEF11BAE0692BA3C52D1B975B9D
SHA1:	1A52989E4EA6090A10C6E5E209685CC7B56F8716
SHA-256:	A0D016ADEF9D56291C363CDC34DDB51B20E7612B2E52A856F7B677319EE765B4
SHA-512:	B0BDEEF6AF814A0AAEF875270D2A1E0D7FDB75F3656F92BCBE8155A84C859BD49653E68A00DEF1D37F43657376B8463858C9C4F991FF88D98AC7A250C7CECDC2
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LeR7NMaAAAAAHwbklBPvfEvkC1aL2sfeeEDXE8s&badge=bottomleft
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LeR7NMaAAAAAHwbklBPvfEvkC1aL2sfeeEDXE8s');(cfg['badge']=cfg['badge']\|\|[]).push('bottomleft');(cfg['clr']=cfg['clr']\|\|[]).push('true');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==';if(v&&v.cookieDeprecationLabel){

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47092), with no line terminators
Category:	downloaded
Size (bytes):	47093
Entropy (8bit):	5.391506777967028
Encrypted:	false
SSDEEP:	768:euGgm68wJ5CHiwJbfz2ki609uGaAw17+TGrlRCdRpaykvGewkv4ish/vgcQWHjpY:tmYvoz+9uqPQtsh/zovEMhV
MD5:	960736F027253F17F4419D032EA63F75
SHA1:	14715AE3DBBC293BACDEBB257A81C0734E52ACF6
SHA-256:	041415F81AE6E88B1888417C56D98C85B191480244E226C882053E0D05C6FC8F
SHA-512:	456B70B5008203BCE8F7829AD6BCF2D3F31E5DC0D54767732E204D338F6983D0EF5689E06DD76CEBAC1CB74E9BA1B0E99B30FBBDD43871B476ABDA71BE1D0357
Malicious:	false
Reputation:	low
URL:	https://tangocard-gr.ada.support/embed/button/bccfc08/index.js
Preview:	!function(){var t,e={9186:function(t,e,n){n(5301)},977:function(t,e,n){t.exports=n(5930)},7293:function(t,e,n){t.exports=n(5140)},8233:function(t,e,n){n(4474)},20:function(t,e,n){n(5267)},6586:function(t,e,n){"use strict";var r=n(172);const o=6e4,i="ALL_FRAMES_LOADED";let a=function(t){return t.Success="SUCCESS",t.Failure="FAILURE",t}({});class s extends Error{constructor(t){super(t),this.name="AdaEmbedError"}}function u(t){if(!t)return;let e=t.charAt(0).toUpperCase()+t.slice(1);const n=e.charAt(e.length-1);[".","?","!"].includes(n)\|\|(e=`${e}.`),console.warn(`Ada Embed - ${e}`)}var c=n(7293);function f(t,e,n){return e in t?c(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}var d=n(9797),l=n.n(d),p=n(1049),v=n(9224),h=n(4720),m=n(5896),y=n(9274),g=n(5101),b=n(1738);const w={},E=["XHR Error: "],O=new p.y({transport:v._,stackParser:h.lG,dsn:null,beforeSend(t){return"Could not connect frame channel."===t.message?null:t},environment:"production",release:"1.8.16-bccfc08",sam

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:21 UTC	522	OUT	GET /js/chunk-vendors.a86487ae.js HTTP/1.1 Host: secure.rewardcodes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:21 UTC	828	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 592258 Connection: close Date: Mon, 24 Mar 2025 15:50:22 GMT Last-Modified: Mon, 27 Jan 2025 20:42:07 GMT ETag: "4ec80fc808b784ca422ec04b57a32cf2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate X-Robots-Tag: noindex, nofollow X-Frame-Options: ALLOWA X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin X-Cache: Miss from cloudfront Via: 1.1 b64fdff42dda37e61c076a0109c42a14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: BgyvUcPVQs-fFsbIhSdfebbH35x07DLLOQrPPSDCOgPqMomdUzkwfw==
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 6c 61 6e 64 69 6e 67 5f 70 61 67 65 5f 73 74 61 74 69 63 5f 66 72 6f 6e 74 65 6e 64 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 6c 61 6e 64 69 6e 67 5f 70 61 67 65 5f 73 74 61 74 69 63 5f 66 72 6f 6e 74 65 6e 64 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 38 5d 2c 7b 36 35 37 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 66 7d 7d 29 3b 0a 2f 2a 0a 41 64 61 70 74 61 74 69 6f 6e 20 6f 66 20 22 6f 62 6a 65 63 74 2d 61 73 73 69 67 6e 22 20 6c 69 62 72 61 72 79 20 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 70 6d 6a 73 2e 63 6f 6d 2f 70 61 63 6b 61 67 Data Ascii: (self["webpackChunklanding_page_static_frontend"]=self["webpackChunklanding_page_static_frontend"]\|\|[]).push([[998],{6575:function(t,e,n){"use strict";n.d(e,{q:function(){return gf}});/*Adaptation of "object-assign" library (https://www.npmjs.com/packag
2025-03-24 15:50:21 UTC	614	IN	Data Raw: 3a 4b 6e 7d 2c 6c 6f 67 3a 76 6f 69 64 20 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 69 28 74 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 31 65 33 2a 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 69 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 64 65 66 61 75 6c 74 73 2c 72 3d 65 2e 72 75 6e 74 69 6d 65 2c 69 3d 65 2e 73 74 6f 72 61 67 65 2c 6f 3d 65 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 2c 73 3d 65 2e 6c 6f 67 67 65 72 2c 61 3d 65 2e 6c 6f 63 61 6c 68 6f 73 74 2c 63 3d 65 2e 63 6f 6e 73 65 6e 74 2c 75 3d 65 2e 66 6c 61 67 53 70 65 63 2c 6c 3d 76 72 28 7b 7d 2c 72 69 2c 6e 2c 74 29 3b 6c 2e 66 65 61 74 75 72 65 73 3d 63 72 28 74 2c 22 66 65 61 74 75 72 65 73 22 29 3b 76 61 72 20 66 3d 73 28 6c 29 3b 6c 2e 6c 6f 67 3d 66 3b 76 61 72 20 68 3d 6c 2e 73 79 Data Ascii: :Kn},log:void 0};function ii(t){return Math.round(1e3*t)}function oi(t,e){var n=e.defaults,r=e.runtime,i=e.storage,o=e.integrations,s=e.logger,a=e.localhost,c=e.consent,u=e.flagSpec,l=vr({},ri,n,t);l.features=cr(t,"features");var f=s(l);l.log=f;var h=l.sy
2025-03-24 15:50:21 UTC	12792	IN	Data Raw: 2c 64 2e 74 65 6c 65 6d 65 74 72 79 52 65 66 72 65 73 68 52 61 74 65 2c 36 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 63 72 28 74 2c 22 73 63 68 65 64 75 6c 65 72 2e 69 6d 70 72 65 73 73 69 6f 6e 73 52 65 66 72 65 73 68 52 61 74 65 22 29 26 26 68 2e 69 6d 70 72 65 73 73 69 6f 6e 73 4d 6f 64 65 3d 3d 3d 49 65 26 26 28 64 2e 69 6d 70 72 65 73 73 69 6f 6e 73 52 65 66 72 65 73 68 52 61 74 65 3d 36 30 29 2c 64 2e 69 6d 70 72 65 73 73 69 6f 6e 73 52 65 66 72 65 73 68 52 61 74 65 3d 69 69 28 64 2e 69 6d 70 72 65 73 73 69 6f 6e 73 52 65 66 72 65 73 68 52 61 74 65 29 2c 64 2e 6d 65 74 72 69 63 73 52 65 66 72 65 73 68 52 61 74 65 26 26 66 2e 77 61 72 6e 28 22 60 6d 65 74 72 69 63 73 52 65 66 72 65 73 68 52 61 74 65 60 20 77 69 6c 6c 20 62 65 20 64 65 70 72 65 63 61 74 Data Ascii: ,d.telemetryRefreshRate,60)),void 0===cr(t,"scheduler.impressionsRefreshRate")&&h.impressionsMode===Ie&&(d.impressionsRefreshRate=60),d.impressionsRefreshRate=ii(d.impressionsRefreshRate),d.metricsRefreshRate&&f.warn("`metricsRefreshRate` will be deprecat
2025-03-24 15:50:21 UTC	4616	IN	Data Raw: 2f 6b 61 72 61 6e 6c 79 6f 6e 73 2f 6d 75 72 6d 75 72 48 61 73 68 33 2e 6a 73 29 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 0a 20 2a 20 7c 20 41 20 54 79 70 65 53 63 72 69 70 74 2f 4a 61 76 61 53 63 72 69 70 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 4d 75 72 6d 75 72 48 61 73 68 33 27 73 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 20 20 20 20 20 7c 0a 20 2a 20 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 7c 0a 20 2a 20 7c 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 2d 32 30 32 30 20 4b 61 72 61 6e 20 4c Data Ascii: /karanlyons/murmurHash3.js) \| * \| A TypeScript/JavaScript implementation of MurmurHash3's hashing algorithms. \| * \|----------------------------------------------------------------------------------\| * \| Copyright (c) 2012-2020 Karan L
2025-03-24 15:50:21 UTC	12792	IN	Data Raw: 6f 5d 26 26 28 61 5b 6f 5d 3d 68 5b 63 5b 74 5b 6f 5d 2d 31 5d 2b 2b 5d 3e 3e 3e 31 35 2d 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 61 7d 2c 76 3d 6e 65 77 20 74 28 32 38 38 29 3b 66 6f 72 28 70 3d 30 3b 70 3c 31 34 34 3b 2b 2b 70 29 76 5b 70 5d 3d 38 3b 66 6f 72 28 70 3d 31 34 34 3b 70 3c 32 35 36 3b 2b 2b 70 29 76 5b 70 5d 3d 39 3b 66 6f 72 28 70 3d 32 35 36 3b 70 3c 32 38 30 3b 2b 2b 70 29 76 5b 70 5d 3d 37 3b 66 6f 72 28 70 3d 32 38 30 3b 70 3c 32 38 38 3b 2b 2b 70 29 76 5b 70 5d 3d 38 3b 76 61 72 20 67 3d 6e 65 77 20 74 28 33 32 29 3b 66 6f 72 28 70 3d 30 3b 70 3c 33 32 3b 2b 2b 70 29 67 5b 70 5d 3d 35 3b 76 61 72 20 79 3d 6d 28 76 2c 39 2c 31 29 2c 62 3d 6d 28 67 2c 35 2c 31 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d Data Ascii: o]&&(a[o]=h[c[t[o]-1]++]>>>15-t[o]);return a},v=new t(288);for(p=0;p<144;++p)v[p]=8;for(p=144;p<256;++p)v[p]=9;for(p=256;p<280;++p)v[p]=7;for(p=280;p<288;++p)v[p]=8;var g=new t(32);for(p=0;p<32;++p)g[p]=5;var y=m(v,9,1),b=m(g,5,1),w=function(t){for(var e=
2025-03-24 15:50:21 UTC	6346	IN	Data Raw: 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 72 5d 2e 6d 61 74 63 68 65 72 47 72 6f 75 70 2e 6d 61 74 63 68 65 72 73 3b 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 49 4e 5f 53 45 47 4d 45 4e 54 22 3d 3d 3d 74 2e 6d 61 74 63 68 65 72 54 79 70 65 26 26 6e 2e 61 64 64 28 74 2e 75 73 65 72 44 65 66 69 6e 65 64 53 65 67 6d 65 6e 74 4d 61 74 63 68 65 72 44 61 74 61 2e 73 65 67 6d 65 6e 74 4e 61 6d 65 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6c 73 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 67 72 6f 75 70 65 64 46 69 6c 74 65 72 73 2c 72 3d 6e 2e 62 79 53 65 74 2c 69 3d 6e 2e 62 79 4e 61 6d 65 2c 6f 3d 6e 2e 62 79 50 72 65 66 69 78 3b 69 66 28 72 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 74 2e 73 Data Ascii: th;r++){var i=e[r].matcherGroup.matchers;i.forEach((function(t){"IN_SEGMENT"===t.matcherType&&n.add(t.userDefinedSegmentMatcherData.segmentName)}))}return n}function ls(t,e){var n=e.groupedFilters,r=n.bySet,i=n.byName,o=n.byPrefix;if(r.length>0)return t.s
2025-03-24 15:50:21 UTC	12792	IN	Data Raw: 74 2e 22 3b 69 66 28 67 72 28 74 2c 65 29 29 72 65 74 75 72 6e 20 74 2e 73 75 62 73 74 72 28 65 2e 6c 65 6e 67 74 68 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 4f 6c 64 53 65 67 6d 65 6e 74 4e 61 6d 65 4b 65 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 74 63 68 69 6e 67 4b 65 79 2b 22 2e 22 2b 74 68 69 73 2e 70 72 65 66 69 78 2b 22 2e 73 65 67 6d 65 6e 74 2e 22 2b 74 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 78 74 72 61 63 74 4f 6c 64 53 65 67 6d 65 6e 74 4b 65 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6d 61 74 63 68 69 6e 67 4b 65 79 2b 22 2e 22 2b 74 68 69 73 2e 70 72 65 66 69 78 2b 22 2e 73 65 67 6d 65 6e 74 2e 22 3b 69 66 28 67 72 28 74 2c 65 29 29 72 65 74 75 Data Ascii: t.";if(gr(t,e))return t.substr(e.length)},e.prototype.buildOldSegmentNameKey=function(t){return this.matchingKey+"."+this.prefix+".segment."+t},e.prototype.extractOldSegmentKey=function(t){var e=this.matchingKey+"."+this.prefix+".segment.";if(gr(t,e))retu
2025-03-24 15:50:21 UTC	2886	IN	Data Raw: 68 69 73 2e 65 76 65 6e 74 53 74 61 74 73 5b 74 5d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 63 6f 72 64 45 76 65 6e 74 53 74 61 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 65 76 65 6e 74 53 74 61 74 73 5b 74 5d 2b 3d 65 2c 74 68 69 73 2e 65 3d 21 31 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4c 61 73 74 53 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 61 73 74 53 79 6e 63 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 63 6f 72 64 53 75 63 63 65 73 73 66 75 6c 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 6c 61 73 74 53 79 6e 63 5b 74 5d 3d 65 2c 74 68 69 73 2e 65 3d 21 31 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6f 70 Data Ascii: his.eventStats[t]},t.prototype.recordEventStats=function(t,e){this.eventStats[t]+=e,this.e=!1},t.prototype.getLastSynchronization=function(){return this.lastSync},t.prototype.recordSuccessfulSync=function(t,e){this.lastSync[t]=e,this.e=!1},t.prototype.pop
2025-03-24 15:50:21 UTC	12792	IN	Data Raw: 69 3d 6e 5b 72 5d 2c 6f 3d 71 6f 28 74 5b 69 5d 29 2c 73 3d 7b 6b 3a 69 2c 66 73 3a 6f 7d 3b 65 2e 70 75 73 68 28 73 29 7d 72 65 74 75 72 6e 7b 6b 65 79 73 3a 65 7d 7d 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 51 73 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 65 74 74 69 6e 67 73 2c 6e 3d 65 2e 73 63 68 65 64 75 6c 65 72 2c 72 3d 6e 2e 69 6d 70 72 65 73 73 69 6f 6e 73 51 75 65 75 65 53 69 7a 65 2c 69 3d 6e 2e 65 76 65 6e 74 73 51 75 65 75 65 53 69 7a 65 2c 6f 3d 65 2e 73 79 6e 63 2c 73 3d 6f 2e 69 6d 70 72 65 73 73 69 6f 6e 73 4d 6f 64 65 2c 61 3d 6f 2e 5f 5f 73 70 6c 69 74 46 69 6c 74 65 72 73 56 61 6c 69 64 61 74 69 6f 6e 2c 63 3d 6e 65 77 20 6a 73 28 61 29 2c 75 3d 6e 65 77 20 44 73 2c 6c 3d 7b 73 70 6c 69 74 73 3a 63 2c 73 65 67 6d 65 6e 74 73 3a 75 2c Data Ascii: i=n[r],o=qo(t[i]),s={k:i,fs:o};e.push(s)}return{keys:e}},t}();function Qs(t){var e=t.settings,n=e.scheduler,r=n.impressionsQueueSize,i=n.eventsQueueSize,o=e.sync,s=o.impressionsMode,a=o.__splitFiltersValidation,c=new js(a),u=new Ds,l={splits:c,segments:u,
2025-03-24 15:50:21 UTC	3592	IN	Data Raw: 69 29 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 72 65 52 65 6c 65 61 73 65 2e 6c 65 6e 67 74 68 2d 74 2e 5f 70 72 65 52 65 6c 65 61 73 65 2e 6c 65 6e 67 74 68 7d 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 72 63 28 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 6e 63 28 74 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 6e 63 28 74 29 2c 72 3d 65 2e 76 65 72 73 69 6f 6e 3d 3d 3d 6e 2e 76 65 72 73 69 6f 6e 3b 72 65 74 75 72 6e 20 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 63 28 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 6e 63 28 74 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 6e 63 28 74 29 2c 72 3d 6e 2e 63 6f 6d 70 61 72 65 28 65 29 3e 3d 30 3b 72 65 Data Ascii: i)return i}return this._preRelease.length-t._preRelease.length},t}();function rc(t){var e=new nc(t);return function(t){var n=new nc(t),r=e.version===n.version;return r}}function ic(t){var e=new nc(t);return function(t){var n=new nc(t),r=n.compare(e)>=0;re

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:21 UTC	512	OUT	GET /js/app.36ab3fdf.js HTTP/1.1 Host: secure.rewardcodes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:21 UTC	828	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 104811 Connection: close Date: Mon, 24 Mar 2025 15:50:22 GMT Last-Modified: Mon, 27 Jan 2025 20:42:07 GMT ETag: "969e7ba437debd65fc8046d950d3db37" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate X-Robots-Tag: noindex, nofollow X-Frame-Options: ALLOWA X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin X-Cache: Miss from cloudfront Via: 1.1 d3a3a5c0949462849856f4aca1fd42ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: 1jJ8Eqlk-nKRwQuKiFS7086IZb0ujFVos3UZ1NN_B5NDsSy4OLP04A==
2025-03-24 15:50:21 UTC	15556	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 31 30 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 64 28 74 2c 7b 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 6e 3d 61 28 36 33 31 38 29 3b 63 6c 61 73 73 20 69 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 63 72 65 64 65 6e 74 69 61 6c 54 79 70 65 3d 65 3f 2e 63 72 65 64 65 6e 74 69 61 6c 54 79 70 65 2c 74 68 69 73 2e 6c 61 62 65 6c 3d 65 3f 2e 6c 61 62 65 6c 2c 74 68 69 73 2e 74 79 70 65 3d 65 3f 2e 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 75 65 3d 65 3f 2e 76 61 6c 75 65 7d 67 65 74 20 69 73 45 78 70 69 72 61 74 69 6f 6e 44 61 74 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 Data Ascii: (function(){var e={1099:function(e,t,a){"use strict";a.d(t,{_:function(){return i}});var n=a(6318);class i{constructor(e){this.credentialType=e?.credentialType,this.label=e?.label,this.type=e?.type,this.value=e?.value}get isExpirationDate(){return this.cr
2025-03-24 15:50:21 UTC	434	IN	Data Raw: 65 6e 63 72 79 70 74 69 6f 6e 56 65 72 73 69 6f 6e 3a 61 2c 6c 6f 63 61 6c 65 3a 6e 3d 22 65 6e 5f 55 53 22 2c 75 72 6c 56 65 72 73 69 6f 6e 3a 69 7d 29 7b 72 65 74 75 72 6e 20 65 28 59 2c 21 30 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 72 2c 6f 29 3d 3e 7b 48 28 29 2e 67 65 74 28 60 2f 24 7b 69 7d 2f 24 7b 61 7d 2f 72 65 77 61 72 64 73 2f 24 7b 74 7d 2f 62 72 61 6e 64 2f 24 7b 6e 7d 60 29 2e 74 68 65 6e 28 28 74 3d 3e 7b 65 28 4a 2c 74 2e 64 61 74 61 29 2c 72 28 74 2e 64 61 74 61 29 7d 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 7b 6f 28 65 29 7d 29 29 2e 66 69 6e 61 6c 6c 79 28 28 28 29 3d 3e 7b 65 28 59 2c 21 31 29 7d 29 29 7d 29 29 7d 7d 3b 76 61 72 20 68 65 3d 7b 73 74 61 74 65 3a 75 65 2c 67 65 74 74 65 72 73 3a 70 65 2c 6d 75 74 61 74 69 6f 6e 73 Data Ascii: encryptionVersion:a,locale:n="en_US",urlVersion:i}){return e(Y,!0),new Promise(((r,o)=>{H().get(`/${i}/${a}/rewards/${t}/brand/${n}`).then((t=>{e(J,t.data),r(t.data)})).catch((e=>{o(e)})).finally((()=>{e(Y,!1)}))}))}};var he={state:ue,getters:pe,mutations
2025-03-24 15:50:21 UTC	1008	IN	Data Raw: 5d 2c 5b 53 2e 62 6d 5d 3a 65 3d 3e 65 5b 6c 65 5d 2c 5b 53 2e 24 64 5d 3a 65 3d 3e 65 5b 63 65 5d 2c 5b 53 2e 68 45 5d 3a 65 3d 3e 65 5b 64 65 5d 7d 2c 76 65 3d 7b 5b 51 5d 28 65 2c 74 29 7b 65 5b 6f 65 5d 3d 74 7d 2c 5b 58 5d 28 65 2c 74 29 7b 65 5b 73 65 5d 3d 74 7d 2c 5b 65 65 5d 28 65 2c 74 29 7b 65 5b 6c 65 5d 3d 74 7d 2c 5b 74 65 5d 28 65 2c 74 29 7b 65 5b 63 65 5d 3d 74 7d 2c 5b 61 65 5d 28 65 2c 74 29 7b 65 5b 64 65 5d 3d 74 7d 7d 2c 79 65 3d 7b 5b 4c 2e 61 78 5d 28 7b 63 6f 6d 6d 69 74 3a 65 7d 29 7b 65 28 51 2c 62 65 5b 6f 65 5d 29 2c 65 28 58 2c 62 65 5b 73 65 5d 29 2c 65 28 65 65 2c 62 65 5b 6c 65 5d 29 2c 65 28 61 65 2c 62 65 5b 64 65 5d 29 2c 65 28 74 65 2c 62 65 5b 63 65 5d 29 7d 2c 61 73 79 6e 63 5b 4c 2e 54 4d 5d 28 7b 63 6f 6d 6d 69 74 Data Ascii: ],[S.bm]:e=>e[le],[S.$d]:e=>e[ce],[S.hE]:e=>e[de]},ve={[Q](e,t){e[oe]=t},[X](e,t){e[se]=t},[ee](e,t){e[le]=t},[te](e,t){e[ce]=t},[ae](e,t){e[de]=t}},ye={[L.ax]({commit:e}){e(Q,be[oe]),e(X,be[se]),e(ee,be[le]),e(ae,be[de]),e(te,be[ce])},async[L.TM]({commit
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 22 65 6d 62 65 64 64 65 64 22 5d 2e 69 6e 63 6c 75 64 65 73 28 61 2e 64 65 76 69 63 65 2e 74 79 70 65 29 26 26 28 61 2e 64 65 76 69 63 65 2e 74 79 70 65 3d 22 6f 74 68 65 72 22 29 29 2c 21 61 7c 7c 61 2e 63 70 75 26 26 76 6f 69 64 20 30 21 3d 3d 61 2e 63 70 75 2e 61 72 63 68 69 74 65 63 74 75 72 65 7c 7c 28 61 2e 63 70 75 3d 7b 61 72 63 68 69 74 65 63 74 75 72 65 3a 65 7d 29 2c 21 61 7c 7c 61 2e 6f 73 26 26 76 6f 69 64 20 30 21 3d 3d 61 2e 6f 73 2e 6e 61 6d 65 7c 7c 28 61 2e 6f 73 3d 7b 6e 61 6d 65 3a 65 2c 76 65 72 73 69 6f 6e 3a 65 7d 29 2c 61 7d 3b 76 61 72 20 45 65 3d 61 28 36 33 31 38 29 2c 4e 65 3d 28 61 28 35 36 30 29 2c 61 28 32 33 30 30 29 29 3b 63 6c 61 73 73 20 78 65 7b 7d 28 30 2c 45 65 2e 5a 29 28 78 65 2c 22 4e 45 43 45 53 53 41 52 59 22 2c Data Ascii: "embedded"].includes(a.device.type)&&(a.device.type="other")),!a\|\|a.cpu&&void 0!==a.cpu.architecture\|\|(a.cpu={architecture:e}),!a\|\|a.os&&void 0!==a.os.name\|\|(a.os={name:e,version:e}),a};var Ee=a(6318),Ne=(a(560),a(2300));class xe{}(0,Ee.Z)(xe,"NECESSARY",
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 75 73 69 65 72 74 20 75 6e 64 20 6b 61 6e 6e 20 6e 69 63 68 74 20 61 6b 74 69 76 69 65 72 74 20 77 65 72 64 65 6e 2e 20 57 65 6e 6e 20 53 69 65 20 64 65 6e 6b 65 6e 2c 20 64 61 73 73 20 65 73 20 73 69 63 68 20 64 61 62 65 69 20 75 6d 20 65 69 6e 65 6e 20 46 65 68 6c 65 72 20 68 61 6e 64 65 6c 74 2c 20 6b 6f 6e 74 61 6b 74 69 65 72 65 6e 20 53 69 65 20 62 69 74 74 65 20 63 73 40 74 61 6e 67 6f 63 61 72 64 2e 63 6f 6d 2e 22 2c 22 66 61 69 6c 65 64 2d 74 6f 2d 61 63 74 69 76 61 74 65 2d 68 69 63 63 75 70 22 3a 22 45 73 20 73 69 65 68 74 20 73 6f 20 61 75 73 2c 20 61 6c 73 20 67 c3 a4 62 65 20 65 73 20 65 69 6e 20 74 65 63 68 6e 69 73 63 68 65 73 20 50 72 6f 62 6c 65 6d 20 61 75 66 20 75 6e 73 65 72 65 72 20 53 65 69 74 65 2e 20 42 69 74 74 65 20 6b 6f 6e 74 Data Ascii: usiert und kann nicht aktiviert werden. Wenn Sie denken, dass es sich dabei um einen Fehler handelt, kontaktieren Sie bitte cs@tangocard.com.","failed-to-activate-hiccup":"Es sieht so aus, als gbe es ein technisches Problem auf unserer Seite. Bitte kont
2025-03-24 15:50:21 UTC	3778	IN	Data Raw: 22 2c 22 65 72 72 6f 72 2d 76 65 72 69 66 79 69 6e 67 2d 74 6f 6b 65 6e 22 3a 22 55 6e 65 20 65 72 72 65 75 72 20 73 e2 80 99 65 73 74 20 70 72 6f 64 75 69 74 65 2e 20 56 65 75 69 6c 6c 65 7a 20 66 65 72 6d 65 72 20 63 65 74 74 65 20 72 c3 a9 63 6f 6d 70 65 6e 73 65 20 65 74 20 6c e2 80 99 6f 75 76 72 69 72 20 c3 a0 20 6e 6f 75 76 65 61 75 20 70 6f 75 72 20 63 6f 6e 74 69 6e 75 65 72 2e 22 2c 22 66 61 69 6c 65 64 2d 74 6f 2d 61 63 74 69 76 61 74 65 2d 66 72 6f 7a 65 6e 22 3a 22 43 65 74 74 65 20 72 c3 a9 63 6f 6d 70 65 6e 73 65 20 65 73 74 20 61 63 74 75 65 6c 6c 65 6d 65 6e 74 20 67 65 6c c3 a9 65 20 65 74 20 6e 65 20 70 65 75 74 20 70 61 73 20 c3 aa 74 72 65 20 61 63 74 69 76 c3 a9 65 2e 20 53 69 20 76 6f 75 73 20 70 65 6e 73 65 7a 20 71 75 5c 27 69 6c Data Ascii: ","error-verifying-token":"Une erreur sest produite. Veuillez fermer cette rcompense et louvrir nouveau pour continuer.","failed-to-activate-frozen":"Cette rcompense est actuellement gele et ne peut pas tre active. Si vous pensez qu\'il
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 63 6c 69 63 6b 2d 74 6f 2d 63 6f 70 79 22 3a 22 43 6c 69 63 65 c3 a1 69 6c 20 6c 65 6e 61 20 63 68 c3 b3 69 70 65 c3 a1 69 6c 22 2c 22 63 6c 6f 73 65 22 3a 22 44 c3 ba 6e 22 2c 22 63 6f 70 69 65 64 22 3a 22 43 c3 b3 69 70 65 c3 a1 69 6c 74 65 22 2c 22 63 6f 70 79 2d 73 63 72 65 65 6e 2d 72 65 61 64 65 72 22 3a 22 43 6e 61 69 70 65 20 61 20 63 68 c3 b3 69 70 65 c3 a1 6c 61 6e 6e 20 64 69 6e 74 69 c3 ba 69 72 20 7b 63 72 65 64 65 6e 74 69 61 6c 4c 61 62 65 6c 7d 22 2c 22 64 6f 63 75 6d 65 6e 74 2d 74 69 74 6c 65 22 3a 22 7b 72 65 77 61 72 64 4e 61 6d 65 7d 20 2d 20 54 61 6e 67 6f 22 2c 22 66 61 69 6c 65 64 2d 74 6f 2d 63 6f 70 79 22 3a 22 54 68 65 69 70 20 61 72 20 61 6e 20 67 63 c3 b3 69 70 65 c3 a1 69 6c 22 2c 22 6d 61 69 Data Ascii: "common":{"click-to-copy":"Cliceil lena chipeil","close":"Dn","copied":"Cipeilte","copy-screen-reader":"Cnaipe a chipelann dintiir {credentialLabel}","document-title":"{rewardName} - Tango","failed-to-copy":"Theip ar an gcipeil","mai
2025-03-24 15:50:21 UTC	1024	IN	Data Raw: 65 22 3a 22 43 72 65 64 65 6e 7a 69 61 6c 69 20 70 72 65 6d 69 6f 22 2c 22 65 6e 74 65 72 2d 73 65 63 75 72 69 74 79 2d 63 6f 64 65 22 3a 22 49 6e 73 65 72 69 73 63 69 20 69 6c 20 63 6f 64 69 63 65 20 64 69 20 73 69 63 75 72 65 7a 7a 61 22 2c 22 66 61 69 6c 65 64 2d 74 6f 2d 61 63 74 69 76 61 74 65 22 3a 22 49 6d 70 6f 73 73 69 62 69 6c 65 20 61 74 74 69 76 61 72 65 20 69 6c 20 70 72 65 6d 69 6f 22 2c 22 65 72 72 6f 72 2d 76 65 72 69 66 79 69 6e 67 2d 74 6f 6b 65 6e 22 3a 22 53 69 20 c3 a8 20 76 65 72 69 66 69 63 61 74 6f 20 75 6e 20 65 72 72 6f 72 65 2e 20 43 68 69 75 64 69 20 71 75 65 73 74 61 20 72 69 63 6f 6d 70 65 6e 73 61 20 65 20 72 69 61 70 72 69 6c 61 20 70 65 72 20 63 6f 6e 74 69 6e 75 61 72 65 2e 22 2c 22 66 61 69 6c 65 64 2d 74 6f 2d 61 63 74 Data Ascii: e":"Credenziali premio","enter-security-code":"Inserisci il codice di sicurezza","failed-to-activate":"Impossibile attivare il premio","error-verifying-token":"Si verificato un errore. Chiudi questa ricompensa e riaprila per continuare.","failed-to-act
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 20 76 69 73 69 74 61 20 68 65 6c 70 2e 74 61 6e 67 6f 63 61 72 64 2e 63 6f 6d 2e 22 2c 22 66 61 69 6c 65 64 2d 67 65 6e 65 72 61 6c 2d 6c 6f 63 6b 65 64 22 3a 22 48 61 69 20 73 75 70 65 72 61 74 6f 20 69 6c 20 6e 75 6d 65 72 6f 20 6d 61 73 73 69 6d 6f 20 64 69 20 74 65 6e 74 61 74 69 76 69 2e 20 53 69 20 70 72 65 67 61 20 64 69 20 72 69 70 72 6f 76 61 72 65 20 64 6f 70 6f 20 33 30 20 6d 69 6e 75 74 69 20 6f 20 76 69 73 69 74 61 20 68 65 6c 70 2e 74 61 6e 67 6f 63 61 72 64 2e 63 6f 6d 2e 22 2c 22 68 65 6c 70 2d 63 65 6e 74 65 72 22 3a 22 63 65 6e 74 72 6f 20 61 73 73 69 73 74 65 6e 7a 61 22 2c 22 69 73 2d 61 63 74 69 76 61 74 65 64 22 3a 22 49 6c 20 74 75 6f 20 70 72 65 6d 69 6f 20 c3 a8 20 61 74 74 69 76 61 74 6f 21 22 2c 22 75 6e 6c 6f 63 6b 65 64 2d 61 Data Ascii: visita help.tangocard.com.","failed-general-locked":"Hai superato il numero massimo di tentativi. Si prega di riprovare dopo 30 minuti o visita help.tangocard.com.","help-center":"centro assistenza","is-activated":"Il tuo premio attivato!","unlocked-a
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 22 69 6e 2d 73 74 6f 72 65 22 3a 22 49 6e 20 64 65 20 77 69 6e 6b 65 6c 22 2c 22 6d 6f 62 69 6c 65 2d 61 70 70 22 3a 22 4d 6f 62 69 65 6c 65 20 61 70 70 22 2c 22 6f 6e 6c 69 6e 65 22 3a 22 4f 6e 6c 69 6e 65 22 2c 22 6f 74 68 65 72 22 3a 22 41 6e 64 65 72 65 22 2c 22 70 68 6f 6e 65 22 3a 22 54 65 6c 65 66 6f 6f 6e 22 2c 22 70 72 69 6e 74 22 3a 22 41 66 64 72 75 6b 6b 65 6e 22 2c 22 74 69 74 6c 65 22 3a 22 48 6f 65 20 69 6e 77 69 73 73 65 6c 65 6e 3f 22 7d 2c 22 64 6f 65 73 2d 6e 6f 74 2d 65 78 70 69 72 65 22 3a 22 56 65 72 6c 6f 6f 70 74 20 6e 69 65 74 22 2c 22 72 65 74 75 72 6e 2d 74 6f 2d 70 61 67 65 2d 6d 65 73 73 61 67 65 22 3a 22 47 65 68 65 6e 20 53 69 65 20 61 75 66 20 64 69 65 73 65 20 53 65 69 74 65 20 7a 75 72 c3 bc 63 6b 2c 20 75 6d 20 6b c3 bc Data Ascii: "in-store":"In de winkel","mobile-app":"Mobiele app","online":"Online","other":"Andere","phone":"Telefoon","print":"Afdrukken","title":"Hoe inwisselen?"},"does-not-expire":"Verloopt niet","return-to-page-message":"Gehen Sie auf diese Seite zurck, um k

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:21 UTC	587	OUT	GET /npm/@mdi/font@latest/css/materialdesignicons.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:21 UTC	739	IN	HTTP/1.1 200 OK Connection: close Content-Length: 346626 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 7.4.47 X-JSD-Version-Type: version ETag: W/"54a02-OVjZUfBzAil15Q3gxxGhe/obcD8" Accept-Ranges: bytes Age: 38018 Date: Mon, 24 Mar 2025 15:50:21 GMT X-Served-By: cache-fra-etou8220161-FRA, cache-lga21975-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 61 74 65 72 69 61 6c 20 44 65 73 69 67 6e 20 49 63 6f 6e 73 22 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 6d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 69 63 6f 6e 73 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 37 2e 34 2e 34 37 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 6d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 69 63 6f 6e 73 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 26 76 3d 37 2e 34 2e 34 37 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 6d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 69 63 6f 6e 73 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 32 3f 76 3d 37 Data Ascii: @font-face{font-family:"Material Design Icons";src:url("../fonts/materialdesignicons-webfont.eot?v=7.4.47");src:url("../fonts/materialdesignicons-webfont.eot?#iefix&v=7.4.47") format("embedded-opentype"),url("../fonts/materialdesignicons-webfont.woff2?v=7
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 61 6c 65 72 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 30 35 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 61 6c 65 72 74 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 35 30 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 38 36 38 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 38 36 39 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 35 31 22 7d 2e 6d 64 69 2d Data Ascii: mdi-account-alert::before{content:"\F0005"}.mdi-account-alert-outline::before{content:"\F0B50"}.mdi-account-arrow-down::before{content:"\F1868"}.mdi-account-arrow-down-outline::before{content:"\F1869"}.mdi-account-arrow-left::before{content:"\F0B51"}.mdi-
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 69 6c 64 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 41 38 39 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 63 68 69 6c 64 2d 63 69 72 63 6c 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 41 38 41 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 63 68 69 6c 64 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 30 43 38 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 63 69 72 63 6c 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 30 39 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 63 69 72 63 6c 65 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 35 35 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 63 6c 6f 63 6b 3a 3a 62 65 66 6f 72 Data Ascii: ild::before{content:"\F0A89"}.mdi-account-child-circle::before{content:"\F0A8A"}.mdi-account-child-outline::before{content:"\F10C8"}.mdi-account-circle::before{content:"\F0009"}.mdi-account-circle-outline::before{content:"\F0B55"}.mdi-account-clock::befor
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 35 38 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 68 61 72 64 2d 68 61 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 35 42 35 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 68 61 72 64 2d 68 61 74 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 41 31 46 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 68 65 61 72 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 38 39 39 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 68 65 61 72 74 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 45 33 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 69 6e 6a 75 72 79 3a 3a 62 65 66 6f Data Ascii: utline::before{content:"\F0B58"}.mdi-account-hard-hat::before{content:"\F05B5"}.mdi-account-hard-hat-outline::before{content:"\F1A1F"}.mdi-account-heart::before{content:"\F0899"}.mdi-account-heart-outline::before{content:"\F0BE3"}.mdi-account-injury::befo
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 6e 74 2d 6e 65 74 77 6f 72 6b 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 31 31 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 6e 65 74 77 6f 72 6b 2d 6f 66 66 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 41 46 31 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 6e 65 74 77 6f 72 6b 2d 6f 66 66 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 41 46 32 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 6e 65 74 77 6f 72 6b 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 45 36 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 6f 66 66 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 31 32 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 6f 66 Data Ascii: nt-network::before{content:"\F0011"}.mdi-account-network-off::before{content:"\F1AF1"}.mdi-account-network-off-outline::before{content:"\F1AF2"}.mdi-account-network-outline::before{content:"\F0BE6"}.mdi-account-off::before{content:"\F0012"}.mdi-account-of
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 31 39 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 73 77 69 74 63 68 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 34 43 42 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 73 79 6e 63 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 39 31 42 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 73 79 6e 63 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 39 31 43 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 74 61 67 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 43 31 42 22 7d 2e 6d 64 69 2d 61 63 63 6f 75 6e 74 2d 74 61 67 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 Data Ascii: ore{content:"\F0019"}.mdi-account-switch-outline::before{content:"\F04CB"}.mdi-account-sync::before{content:"\F191B"}.mdi-account-sync-outline::before{content:"\F191C"}.mdi-account-tag::before{content:"\F1C1B"}.mdi-account-tag-outline::before{content:"\F1
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 30 42 45 39 22 7d 2e 6d 64 69 2d 61 69 72 62 61 6c 6c 6f 6f 6e 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 31 43 22 7d 2e 6d 64 69 2d 61 69 72 62 61 6c 6c 6f 6f 6e 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 30 30 42 22 7d 2e 6d 64 69 2d 61 69 72 70 6c 61 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 31 44 22 7d 2e 6d 64 69 2d 61 69 72 70 6c 61 6e 65 2d 61 6c 65 72 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 38 37 41 22 7d 2e 6d 64 69 2d 61 69 72 70 6c 61 6e 65 2d 63 68 65 63 6b 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 38 37 42 22 7d 2e 6d 64 69 2d 61 69 72 70 6c 61 6e 65 2d 63 6c 6f 63 6b 3a 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: 0BE9"}.mdi-airballoon::before{content:"\F001C"}.mdi-airballoon-outline::before{content:"\F100B"}.mdi-airplane::before{content:"\F001D"}.mdi-airplane-alert::before{content:"\F187A"}.mdi-airplane-check::before{content:"\F187B"}.mdi-airplane-clock::before{co
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 35 22 7d 2e 6d 64 69 2d 61 6c 61 72 6d 2d 70 6c 75 73 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 32 34 22 7d 2e 6d 64 69 2d 61 6c 61 72 6d 2d 73 6e 6f 6f 7a 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 36 38 45 22 7d 2e 6d 64 69 2d 61 6c 62 75 6d 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 32 35 22 7d 2e 6d 64 69 2d 61 6c 65 72 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 32 36 22 7d 2e 6d 64 69 2d 61 6c 65 72 74 2d 62 6f 78 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 30 32 37 22 7d 2e 6d 64 69 2d 61 6c 65 72 74 2d 62 6f 78 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 43 45 34 22 7d 2e 6d 64 69 2d 61 6c 65 Data Ascii: 5"}.mdi-alarm-plus::before{content:"\F0024"}.mdi-alarm-snooze::before{content:"\F068E"}.mdi-album::before{content:"\F0025"}.mdi-alert::before{content:"\F0026"}.mdi-alert-box::before{content:"\F0027"}.mdi-alert-box-outline::before{content:"\F0CE4"}.mdi-ale
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 31 43 32 22 7d 2e 6d 64 69 2d 61 6c 69 67 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 72 69 67 68 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 31 43 34 22 7d 2e 6d 64 69 2d 61 6c 69 67 6e 2d 76 65 72 74 69 63 61 6c 2d 62 6f 74 74 6f 6d 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 31 43 35 22 7d 2e 6d 64 69 2d 61 6c 69 67 6e 2d 76 65 72 74 69 63 61 6c 2d 63 65 6e 74 65 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 31 43 36 22 7d 2e 6d 64 69 2d 61 6c 69 67 6e 2d 76 65 72 74 69 63 61 6c 2d 64 69 73 74 72 69 62 75 74 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 31 39 36 33 22 7d 2e 6d 64 69 2d 61 6c 69 67 6e 2d 76 65 72 74 69 63 61 6c 2d 74 Data Ascii: ore{content:"\F11C2"}.mdi-align-horizontal-right::before{content:"\F11C4"}.mdi-align-vertical-bottom::before{content:"\F11C5"}.mdi-align-vertical-center::before{content:"\F11C6"}.mdi-align-vertical-distribute::before{content:"\F1963"}.mdi-align-vertical-t
2025-03-24 15:50:21 UTC	1378	IN	Data Raw: 69 72 63 6c 65 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 46 36 22 7d 2e 6d 64 69 2d 61 6c 70 68 61 2d 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 41 46 32 22 7d 2e 6d 64 69 2d 61 6c 70 68 61 2d 65 2d 62 6f 78 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 30 43 22 7d 2e 6d 64 69 2d 61 6c 70 68 61 2d 65 2d 62 6f 78 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 46 37 22 7d 2e 6d 64 69 2d 61 6c 70 68 61 2d 65 2d 63 69 72 63 6c 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 46 30 42 46 38 22 7d 2e 6d 64 69 2d 61 6c 70 68 61 2d 65 2d 63 69 72 63 6c 65 2d 6f 75 74 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: ircle-outline::before{content:"\F0BF6"}.mdi-alpha-e::before{content:"\F0AF2"}.mdi-alpha-e-box::before{content:"\F0B0C"}.mdi-alpha-e-box-outline::before{content:"\F0BF7"}.mdi-alpha-e-circle::before{content:"\F0BF8"}.mdi-alpha-e-circle-outline::before{conte

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:21 UTC	568	OUT	GET /7328892/6300172/css/fonts.css HTTP/1.1 Host: cloud.typography.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:21 UTC	281	IN	HTTP/1.1 403 Forbidden Server: AkamaiNetStorage Content-Length: 146 Content-Type: text/html X-hfj-no-referrer-bad-date: yes ETag: "724a89c93cef0abcc6285efcbdf45559:1557357075" Cache-Control: must-revalidate, private Date: Mon, 24 Mar 2025 15:50:21 GMT Connection: close
2025-03-24 15:50:21 UTC	146	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 34 30 33 20 46 6f 72 62 69 64 64 65 6e 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (403 Forbidden) has occurred in response to this request.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:21 UTC	577	OUT	GET /tags.js HTTP/1.1 Host: dd.blackhawknetwork.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://secure.rewardcodes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:21 UTC	702	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 182959 Connection: close Date: Mon, 24 Mar 2025 15:50:22 GMT Last-Modified: Tue, 11 Mar 2025 11:42:01 GMT ETag: "a78d7ec7eddcaeae5d21c53fdf477cd2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600, public x-amz-version-id: O1BbAwJEjK00cBOsx5D8Xy1wEOFPdtc4 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c079338af747d912717239089fea0484.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: 4k0RJ405ctQ6WgPhRyRBaOyupo74aN1J5PfmmLhQD7qZeOKAeOyqBg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Vary: Origin
2025-03-24 15:50:21 UTC	15682	IN	Data Raw: 2f 2a 2a 20 44 61 74 61 44 6f 6d 65 20 69 73 20 61 20 63 79 62 65 72 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 62 6f 74 20 61 63 74 69 76 69 74 79 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 64 6f 6d 65 2e 63 6f 20 28 76 65 72 73 69 6f 6e 20 34 2e 34 33 2e 33 29 20 2a 2f 20 0a 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 72 2c 73 29 7b 69 66 28 21 6e 5b 72 5d 29 7b 69 66 28 21 74 5b 72 5d 29 7b 76 61 72 20 64 3d 27 5c 78 36 36 5c 78 37 35 5c 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 64 29 72 65 74 75 72 6e 20 64 28 72 2c 21 30 29 3b 69 66 28 61 29 Data Ascii: /** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.43.3) */ !function e(t,n,i){function o(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)
2025-03-24 15:50:21 UTC	308	IN	Data Raw: 5c 78 37 34 5c 78 36 31 5c 78 36 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 33 64 27 2b 74 2b 6f 2b 27 5c 78 33 62 5c 78 32 30 5c 78 37 30 5c 78 36 31 5c 78 37 34 5c 78 36 38 5c 78 33 64 5c 78 32 66 27 2b 28 6e 3f 27 5c 78 33 62 5c 78 32 30 5c 78 36 34 5c 78 36 66 5c 78 36 64 5c 78 36 31 5c 78 36 39 5c 78 36 65 5c 78 33 64 27 2b 6e 3a 27 27 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 74 68 69 73 5b 5b 27 5c 78 36 37 5c 78 36 35 5c 78 37 34 5c 78 35 32 5c 78 36 66 5c 78 36 66 5c 78 37 34 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 31 5c 78 36 39 5c 78 36 65 27 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 27 5c 78 37 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 27 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 27 27 3b 76 Data Ascii: \x74\x61\x64\x6f\x6d\x65\x3d'+t+o+'\x3b\x20\x70\x61\x74\x68\x3d\x2f'+(n?'\x3b\x20\x64\x6f\x6d\x61\x69\x6e\x3d'+n:'');}catch(e){}},this[['\x67\x65\x74\x52\x6f\x6f\x74\x44\x6f\x6d\x61\x69\x6e']]=function(e){if('\x73\x74\x72\x69\x6e\x67'!=typeof e)return'';v
2025-03-24 15:50:21 UTC	926	IN	Data Raw: 36 27 5d 5d 28 74 29 3b 69 66 28 2d 31 3d 3d 3d 6e 29 72 65 74 75 72 6e 27 27 3b 76 61 72 20 69 3d 65 5b 5b 27 5c 78 37 33 5c 78 37 35 5c 78 36 32 5c 78 37 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 27 5d 5d 28 6e 2b 74 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 5d 29 2c 6f 3d 69 5b 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 27 5d 5d 28 27 5c 78 32 66 27 29 2c 61 3d 2d 31 21 3d 3d 6f 3f 69 5b 5b 27 5c 78 37 33 5c 78 37 35 5c 78 36 32 5c 78 37 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 27 5d 5d 28 30 2c 6f 29 3a 69 2c 72 3d 61 5b 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 27 5d 5d Data Ascii: 6']](t);if(-1===n)return'';var i=e[['\x73\x75\x62\x73\x74\x72\x69\x6e\x67']](n+t[['\x6c\x65\x6e\x67\x74\x68']]),o=i[['\x69\x6e\x64\x65\x78\x4f\x66']]('\x2f'),a=-1!==o?i[['\x73\x75\x62\x73\x74\x72\x69\x6e\x67']](0,o):i,r=a[['\x69\x6e\x64\x65\x78\x4f\x66']]
2025-03-24 15:50:21 UTC	12792	IN	Data Raw: 35 27 5d 5d 28 74 2c 27 27 29 3b 7d 29 3a 65 3b 7d 2c 74 68 69 73 5b 5b 27 5c 78 36 31 5c 78 36 34 5c 78 36 34 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 65 5b 5b 27 5c 78 36 31 5c 78 36 34 5c 78 36 34 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 3f 65 5b 5b 27 5c 78 36 31 5c 78 36 34 5c 78 36 34 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 28 Data Ascii: 5']](t,'');}):e;},this[['\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']]=function(e,t,n,i){e[['\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']]?e[['\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']](
2025-03-24 15:50:21 UTC	4616	IN	Data Raw: 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5b 5b 27 5c 78 35 35 5c 78 35 32 5c 78 34 63 27 5d 5d 26 26 28 6e 3d 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 52 4c 29 2c 77 69 6e 64 6f 77 5b 5b 27 5c 78 35 32 5c 78 36 35 5c 78 37 31 5c 78 37 35 5c 78 36 35 5c 78 37 33 5c 78 37 34 27 5d 5d 26 26 27 5c 78 36 36 5c 78 37 35 5c 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5b 5b 27 5c 78 35 32 5c 78 36 35 5c 78 37 31 5c 78 37 35 5c 78 36 35 5c 78 37 33 5c 78 37 34 27 5d 5d 26 26 28 74 3d 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 71 75 65 73 74 29 2c 74 3f 65 5b 5b 27 5c 78 37 35 5c 78 37 32 5c 78 36 63 27 5d 5d 3a 6e Data Ascii: x6e\x63\x74\x69\x6f\x6e'==typeof window[['\x55\x52\x4c']]&&(n=e instanceof URL),window[['\x52\x65\x71\x75\x65\x73\x74']]&&'\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof window[['\x52\x65\x71\x75\x65\x73\x74']]&&(t=e instanceof Request),t?e[['\x75\x72\x6c']]:n
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 78 36 32 5c 78 34 36 5c 78 34 33 5c 78 33 33 5c 78 34 62 27 2c 27 5c 78 37 61 5c 78 36 37 5c 78 37 32 5c 78 34 36 5c 78 37 39 5c 78 37 37 5c 78 36 39 27 2c 27 5c 78 37 61 5c 78 36 37 5c 78 37 32 5c 78 34 36 5c 78 37 31 5c 78 35 37 27 2c 27 5c 78 34 34 5c 78 34 64 5c 78 36 65 5c 78 35 34 5c 78 34 33 5c 78 36 38 5c 78 37 32 5c 78 35 61 27 2c 27 5c 78 34 32 5c 78 37 38 5c 78 36 32 5c 78 34 36 5c 78 34 32 5c 78 37 38 5c 78 34 37 27 2c 27 5c 78 37 61 5c 78 34 65 5c 78 37 32 5c 78 35 61 5c 78 34 32 5c 78 33 33 5c 78 37 61 5c 78 34 62 5c 78 34 33 5c 78 34 61 5c 78 36 39 27 2c 27 5c 78 37 61 5c 78 37 38 5c 78 37 61 5c 78 34 38 5c 78 34 32 5c 78 36 36 5c 78 35 38 5c 78 35 61 5c 78 37 39 5c 78 37 38 5c 78 37 32 5c 78 34 33 5c 78 34 33 5c 78 33 32 5c 78 37 36 5c 78 Data Ascii: x62\x46\x43\x33\x4b','\x7a\x67\x72\x46\x79\x77\x69','\x7a\x67\x72\x46\x71\x57','\x44\x4d\x6e\x54\x43\x68\x72\x5a','\x42\x78\x62\x46\x42\x78\x47','\x7a\x4e\x72\x5a\x42\x33\x7a\x4b\x43\x4a\x69','\x7a\x78\x7a\x48\x42\x66\x58\x5a\x79\x78\x72\x43\x43\x32\x76\x
2025-03-24 15:50:21 UTC	11754	IN	Data Raw: 78 36 66 5c 78 34 35 5c 78 37 38 5c 78 36 35 5c 78 36 33 5c 78 37 35 5c 78 37 34 5c 78 36 35 27 5d 3d 5b 5d 2c 74 68 69 73 5b 27 5c 78 35 66 5c 78 36 39 5c 78 36 36 5c 78 37 32 5c 78 36 31 5c 78 36 64 5c 78 36 35 5c 78 35 32 5c 78 36 35 5c 78 36 36 27 5d 3d 6e 75 6c 6c 3b 76 61 72 20 72 2c 73 3d 77 69 6e 64 6f 77 5b 27 5c 78 36 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 66 5c 78 37 30 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 5c 78 37 33 27 5d 5b 27 5c 78 36 34 5c 78 37 32 5c 78 37 39 5c 78 35 32 5c 78 37 35 5c 78 36 65 27 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 28 21 41 72 72 61 79 5b 74 28 32 35 37 29 5d 28 73 29 26 26 28 73 3d 5b 5d 29 2c 74 68 69 73 5b 27 5c 78 37 37 5c 78 36 66 5c 78 37 32 Data Ascii: x6f\x45\x78\x65\x63\x75\x74\x65']=[],this['\x5f\x69\x66\x72\x61\x6d\x65\x52\x65\x66']=null;var r,s=window['\x64\x61\x74\x61\x44\x6f\x6d\x65\x4f\x70\x74\x69\x6f\x6e\x73']['\x64\x72\x79\x52\x75\x6e'];for(var d in(!Array[t(257)](s)&&(s=[]),this['\x77\x6f\x72
2025-03-24 15:50:21 UTC	6396	IN	Data Raw: 78 33 61 5c 78 36 35 5c 78 32 65 5c 78 36 64 5c 78 36 35 5c 78 37 33 5c 78 37 33 5c 78 36 31 5c 78 36 37 5c 78 36 35 5c 78 37 64 5c 78 32 39 5c 78 37 64 5c 78 37 34 5c 78 37 32 5c 78 37 39 5c 78 37 62 5c 78 37 36 5c 78 36 31 5c 78 37 32 5c 78 32 30 5c 78 36 66 5c 78 33 64 5c 78 37 62 5c 78 37 34 5c 78 37 61 5c 78 37 30 5c 78 33 61 5c 78 32 32 5c 78 34 65 5c 78 34 31 5c 78 32 32 5c 78 37 64 5c 78 33 62 5c 78 37 33 5c 78 36 35 5c 78 36 63 5c 78 36 36 5c 78 32 65 5c 78 34 39 5c 78 36 65 5c 78 37 34 5c 78 36 63 5c 78 32 36 5c 78 32 36 5c 78 37 33 5c 78 36 35 5c 78 36 63 5c 78 36 36 5c 78 32 65 5c 78 34 39 5c 78 36 65 5c 78 37 34 5c 78 36 63 5c 78 32 65 5c 78 34 34 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 35 34 5c 78 36 39 5c 78 36 64 5c 78 36 35 5c 78 34 36 Data Ascii: x3a\x65\x2e\x6d\x65\x73\x73\x61\x67\x65\x7d\x29\x7d\x74\x72\x79\x7b\x76\x61\x72\x20\x6f\x3d\x7b\x74\x7a\x70\x3a\x22\x4e\x41\x22\x7d\x3b\x73\x65\x6c\x66\x2e\x49\x6e\x74\x6c\x26\x26\x73\x65\x6c\x66\x2e\x49\x6e\x74\x6c\x2e\x44\x61\x74\x65\x54\x69\x6d\x65\x46
2025-03-24 15:50:21 UTC	16384	IN	Data Raw: 66 5c 78 37 37 27 5d 29 3b 65 5b 27 5c 78 36 38 5c 78 36 33 27 5d 3d 69 5b 27 5c 78 36 38 5c 78 36 33 27 5d 2c 65 5b 6e 28 34 36 34 29 5d 3d 69 5b 27 5c 78 36 32 5c 78 37 32 5c 78 35 66 5c 78 36 66 5c 78 36 38 27 5d 2c 65 5b 27 5c 78 36 32 5c 78 37 32 5c 78 35 66 5c 78 36 66 5c 78 37 37 27 5d 3d 69 5b 27 5c 78 36 32 5c 78 37 32 5c 78 35 66 5c 78 36 66 5c 78 37 37 27 5d 2c 65 5b 27 5c 78 37 35 5c 78 36 31 27 5d 3d 69 5b 27 5c 78 37 35 5c 78 36 31 27 5d 2c 65 5b 27 5c 78 37 37 5c 78 36 32 5c 78 36 34 27 5d 3d 69 5b 27 5c 78 37 37 5c 78 36 32 5c 78 36 34 27 5d 3b 74 72 79 7b 76 61 72 20 61 3d 77 28 6f 2c 69 29 3b 61 5b 27 5c 78 36 62 5c 78 36 35 5c 78 37 39 5c 78 37 33 5c 78 34 34 5c 78 36 35 5c 78 36 63 5c 78 37 34 5c 78 36 31 27 5d 26 26 28 65 5b 27 5c 78 Data Ascii: f\x77']);e['\x68\x63']=i['\x68\x63'],e[n(464)]=i['\x62\x72\x5f\x6f\x68'],e['\x62\x72\x5f\x6f\x77']=i['\x62\x72\x5f\x6f\x77'],e['\x75\x61']=i['\x75\x61'],e['\x77\x62\x64']=i['\x77\x62\x64'];try{var a=w(o,i);a['\x6b\x65\x79\x73\x44\x65\x6c\x74\x61']&&(e['\x
2025-03-24 15:50:21 UTC	1024	IN	Data Raw: 78 34 65 5c 78 34 31 27 2c 65 5b 6e 28 33 34 33 29 5d 3d 27 5c 78 34 65 5c 78 34 31 27 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 36 36 5c 78 37 34 5c 78 37 33 27 5d 3d 27 5c 78 34 65 5c 78 34 31 27 2c 65 5b 6e 28 33 31 36 29 5d 3d 27 5c 78 34 65 5c 78 34 31 27 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 36 64 5c 78 37 30 5c 78 33 33 5c 78 37 34 5c 78 37 33 27 5d 3d 27 5c 78 34 65 5c 78 34 31 27 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 37 37 5c 78 36 64 5c 78 37 34 5c 78 37 33 27 5d 3d 27 5c 78 34 65 5c 78 34 31 27 3b 7d 7d 2c 74 68 69 73 5b 27 5c 78 36 34 5c 78 36 34 5c 78 35 66 5c 78 34 65 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 3b 74 72 79 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 5b 6e 28 34 31 39 29 5d 28 6e 28 33 32 32 29 29 Data Ascii: x4e\x41',e[n(343)]='\x4e\x41',e['\x61\x63\x66\x74\x73']='\x4e\x41',e[n(316)]='\x4e\x41',e['\x61\x63\x6d\x70\x33\x74\x73']='\x4e\x41',e['\x61\x63\x77\x6d\x74\x73']='\x4e\x41';}},this['\x64\x64\x5f\x4e']=function(){var n=t;try{var i=document[n(419)](n(322))

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:22 UTC	537	OUT	GET /css/landing-page.a4acc4ba.css HTTP/1.1 Host: secure.rewardcodes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:23 UTC	814	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 103182 Connection: close Date: Mon, 24 Mar 2025 15:50:24 GMT Last-Modified: Mon, 27 Jan 2025 20:42:06 GMT ETag: "a746345accc8b375e260e5602160e256" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate X-Robots-Tag: noindex, nofollow X-Frame-Options: ALLOWA X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin X-Cache: Miss from cloudfront Via: 1.1 22d3debbbb07cb3be927b2ec2660bc0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: oHVlTS6obfnalOYIIIDsrXhCqxJx7xkeUg4YIxckYGHUVueIwXwnmw==
2025-03-24 15:50:23 UTC	15345	IN	Data Raw: 2e 74 63 2d 6f 70 65 6e 2d 6c 6f 6f 70 2d 63 72 65 64 65 6e 74 69 61 6c 2d 76 61 6c 75 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 75 6e 62 6f 78 69 6e 67 2d 74 63 2d 6f 70 65 6e 2d 6c 6f 6f 70 2d 63 72 65 64 65 6e 74 69 61 6c 2d 72 6f 77 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 75 6e 62 6f 78 69 6e 67 2d 74 63 2d 6f 70 65 6e 2d 6c 6f 6f 70 2d 63 72 65 64 65 6e 74 69 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 75 6e 62 6f 78 69 6e 67 2d 74 63 2d 6f 70 65 6e 2d 6c 6f 6f 70 2d 63 Data Ascii: .tc-open-loop-credential-value{font-size:20px;letter-spacing:2px;font-weight:700}.unboxing-tc-open-loop-credential-row{padding-top:1rem!important}.unboxing-tc-open-loop-credential-container{box-shadow:none!important;cursor:default}.unboxing-tc-open-loop-c
2025-03-24 15:50:23 UTC	1667	IN	Data Raw: 2d 6f 75 74 6c 69 6e 65 64 2e 76 2d 69 6e 70 75 74 2d 2d 64 65 6e 73 65 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 73 69 6e 67 6c 65 2d 6c 69 6e 65 3e 2e 76 2d 69 6e 70 75 74 5f 5f 63 6f 6e 74 72 6f 6c 3e 2e 76 2d 69 6e 70 75 74 5f 5f 73 6c 6f 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 6f 75 74 6c 69 6e 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 65 6e 63 6c 6f 73 65 64 20 2e 76 2d 69 6e 70 75 74 5f 5f 61 70 70 65 6e 64 2d 69 6e 6e 65 72 2c 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 65 6e 63 6c 6f 73 65 64 20 2e 76 2d 69 6e 70 75 74 5f 5f 61 70 70 65 6e 64 2d 6f 75 74 65 72 2c 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 65 6e 63 6c Data Ascii: -outlined.v-input--dense.v-text-field--single-line>.v-input__control>.v-input__slot{min-height:40px}.v-text-field--outlined{border-radius:4px}.v-text-field--enclosed .v-input__append-inner,.v-text-field--enclosed .v-input__append-outer,.v-text-field--encl
2025-03-24 15:50:23 UTC	16384	IN	Data Raw: 2d 73 6f 6c 6f 29 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 73 69 6e 67 6c 65 2d 6c 69 6e 65 20 2e 76 2d 69 6e 70 75 74 5f 5f 70 72 65 70 65 6e 64 2d 6f 75 74 65 72 2c 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 66 75 6c 6c 2d 77 69 64 74 68 2e 76 2d 69 6e 70 75 74 2d 2d 64 65 6e 73 65 3a 6e 6f 74 28 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 73 6f 6c 6f 29 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 73 69 6e 67 6c 65 2d 6c 69 6e 65 20 2e 76 2d 69 6e 70 75 74 5f 5f 61 70 70 65 6e 64 2d 69 6e 6e 65 72 2c 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 66 75 6c 6c 2d 77 69 64 74 68 2e 76 2d 69 6e 70 75 74 2d 2d 64 65 6e 73 65 3a 6e 6f 74 28 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 73 6f 6c 6f 29 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 73 69 6e Data Ascii: -solo).v-text-field--single-line .v-input__prepend-outer,.v-text-field--full-width.v-input--dense:not(.v-text-field--solo).v-text-field--single-line .v-input__append-inner,.v-text-field--full-width.v-input--dense:not(.v-text-field--solo).v-text-field--sin
2025-03-24 15:50:23 UTC	1514	IN	Data Raw: 63 74 69 6f 6e 2d 74 65 78 74 2c 2e 74 68 65 6d 65 2d 2d 6c 69 67 68 74 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 3a 6e 6f 74 28 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 2d 2d 64 69 73 61 62 6c 65 64 29 20 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 73 75 62 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 36 29 7d 2e 74 68 65 6d 65 2d 2d 6c 69 67 68 74 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 30 34 7d 2e 74 68 65 6d 65 2d 2d 6c 69 67 68 74 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 2d 2d 61 63 74 69 76 65 3a 62 65 66 6f 72 65 2c 2e 74 68 65 6d 65 2d 2d 6c 69 67 68 74 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 2d 2d 61 63 74 69 76 65 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 2e 74 68 65 6d 65 2d Data Ascii: ction-text,.theme--light.v-list-item:not(.v-list-item--disabled) .v-list-item__subtitle{color:rgba(0,0,0,.6)}.theme--light.v-list-item:hover:before{opacity:.04}.theme--light.v-list-item--active:before,.theme--light.v-list-item--active:hover:before,.theme-
2025-03-24 15:50:23 UTC	16384	IN	Data Raw: 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 31 32 70 78 20 30 7d 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 61 63 74 69 6f 6e 20 2e 76 2d 69 6e 70 75 74 2c 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 61 63 74 69 6f 6e 20 2e 76 2d 69 6e 70 75 74 2d 2d 73 65 6c 65 63 74 69 6f 6e 2d 63 6f 6e 74 72 6f 6c 73 5f 5f 69 6e 70 75 74 2c 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 61 63 74 69 6f 6e 20 2e 76 2d 69 6e 70 75 74 5f 5f 63 6f 6e 74 72 6f 6c 2c 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 61 63 74 69 6f 6e 20 2e 76 2d 69 6e 70 75 74 5f 5f 73 6c 6f 74 7b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 61 63 74 69 6f 6e 20 2e 76 2d 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 76 2d Data Ascii: lign-self:center;margin:12px 0}.v-list-item__action .v-input,.v-list-item__action .v-input--selection-controls__input,.v-list-item__action .v-input__control,.v-list-item__action .v-input__slot{margin:0!important}.v-list-item__action .v-input{padding:0}.v-
2025-03-24 15:50:23 UTC	534	IN	Data Raw: 6f 75 70 2e 76 2d 69 74 65 6d 2d 67 72 6f 75 70 3e 2e 76 2d 73 6c 69 64 65 2d 67 72 6f 75 70 5f 5f 70 72 65 76 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 76 2d 73 6c 69 64 65 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 3a 30 20 31 20 61 75 74 6f 7d 2e 76 2d 73 6c 69 64 65 2d 67 72 6f 75 70 5f 5f 6e 65 78 74 2c 2e 76 2d 73 6c 69 64 65 2d 67 72 6f 75 70 5f 5f 70 72 65 76 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 30 20 31 20 35 32 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 32 70 78 7d 2e 76 2d 73 6c 69 64 65 2d 67 72 6f 75 70 5f 5f 63 6f 6e 74 65 6e 74 7b 64 69 73 70 Data Ascii: oup.v-item-group>.v-slide-group__prev{cursor:pointer}.v-slide-item{display:inline-flex;flex:0 1 auto}.v-slide-group__next,.v-slide-group__prev{align-items:center;display:flex;flex:0 1 52px;justify-content:center;min-width:52px}.v-slide-group__content{disp
2025-03-24 15:50:23 UTC	16384	IN	Data Raw: 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 76 2d 77 69 6e 64 6f 77 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 38 2c 2e 35 2c 31 29 7d 2e 76 2d 77 69 6e 64 6f 77 5f 5f 63 6f 6e 74 61 69 6e 65 72 2d 2d 69 73 2d 61 63 74 69 76 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 76 2d 77 69 6e 64 6f 77 5f 5f 6e 65 78 74 2c 2e 76 2d 77 69 6e 64 6f 77 5f 5f 70 72 65 76 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 3b 62 6f 72 64 65 72 Data Ascii: rflow:hidden}.v-window__container{display:flex;flex-direction:column;height:inherit;position:relative;transition:.3s cubic-bezier(.25,.8,.5,1)}.v-window__container--is-active{overflow:hidden}.v-window__next,.v-window__prev{background:rgba(0,0,0,.3);border
2025-03-24 15:50:23 UTC	16384	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 6c 74 72 20 2e 76 2d 63 68 69 70 2d 2d 70 69 6c 6c 20 2e 76 2d 61 76 61 74 61 72 2d 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 6c 74 72 20 2e 76 2d 63 68 69 70 2d 2d 70 69 6c 6c 20 2e 76 2d 61 76 61 74 61 72 2d 2d 72 69 67 68 74 2c 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 72 74 6c 20 2e 76 2d 63 68 69 70 2d 2d 70 69 6c 6c 20 2e 76 2d 61 76 61 74 61 72 2d 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 32 70 78 7d 2e 76 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 2d 69 73 2d 72 74 6c 20 2e 76 2d Data Ascii: !important;width:32px!important}.v-application--is-ltr .v-chip--pill .v-avatar--left{margin-left:-12px}.v-application--is-ltr .v-chip--pill .v-avatar--right,.v-application--is-rtl .v-chip--pill .v-avatar--left{margin-right:-12px}.v-application--is-rtl .v-
2025-03-24 15:50:23 UTC	15596	IN	Data Raw: 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 31 2e 30 39 70 78 7d 2e 67 69 66 74 2d 63 61 72 64 2d 63 74 61 5f 5f 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 34 64 30 38 37 32 31 34 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 62 31 61 36 65 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 29 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 72 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 37 35 72 65 6d 20 31 2e 35 72 Data Ascii: t:600;line-height:21.09px}.gift-card-cta__button[data-v-4d087214]{font-size:1rem;font-weight:600;line-height:1.25rem;text-align:center;text-decoration:none;background:#3b1a6e;color:var(--t-color-background)!important;border-radius:2rem;padding:.75rem 1.5r
2025-03-24 15:50:23 UTC	2990	IN	Data Raw: 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 38 2c 2e 35 2c 31 29 7d 2e 76 2d 65 78 70 61 6e 73 69 6f 6e 2d 70 61 6e 65 6c 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 69 6e 68 65 72 69 74 3b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 2e 32 38 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 2e 32 2c 31 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 31 70 78 20 2d 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 32 70 78 20 32 70 78 20 30 20 72 67 62 61 28 30 Data Ascii: cubic-bezier(.25,.8,.5,1)}.v-expansion-panel:before{border-radius:inherit;bottom:0;content:"";left:0;position:absolute;right:0;top:0;z-index:-1;transition:box-shadow .28s cubic-bezier(.4,0,.2,1);box-shadow:0 3px 1px -2px rgba(0,0,0,.2),0 2px 2px 0 rgba(0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:22 UTC	521	OUT	GET /js/landing-page.d412d90d.js HTTP/1.1 Host: secure.rewardcodes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:23 UTC	828	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 303296 Connection: close Date: Mon, 24 Mar 2025 15:50:23 GMT Last-Modified: Mon, 27 Jan 2025 20:42:07 GMT ETag: "5fdd7eba582e69c15f0818f70b31fe7c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate X-Robots-Tag: noindex, nofollow X-Frame-Options: ALLOWA X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin X-Cache: Miss from cloudfront Via: 1.1 e48704e6e4e9818f22c02e73e105de8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: ICIdH72Y5vj2uSuK-t5O9MkVtQfYIKjLTZUfY2HAhTNHppxlfo825Q==
2025-03-24 15:50:23 UTC	16384	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 6c 61 6e 64 69 6e 67 5f 70 61 67 65 5f 73 74 61 74 69 63 5f 66 72 6f 6e 74 65 6e 64 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 6c 61 6e 64 69 6e 67 5f 70 61 67 65 5f 73 74 61 74 69 63 5f 66 72 6f 6e 74 65 6e 64 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 31 5d 2c 7b 34 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6e 7d 7d 29 3b 76 61 72 20 73 3d 69 28 32 39 32 35 29 2c 6e 3d 69 28 38 39 31 34 29 2c 61 3d 69 28 39 31 39 36 29 2c 6f 3d 69 28 33 39 36 30 29 2c 72 3d 69 28 31 30 35 30 29 2c 6c 3d 69 28 Data Ascii: (self["webpackChunklanding_page_static_frontend"]=self["webpackChunklanding_page_static_frontend"]\|\|[]).push([[781],{4616:function(t,e,i){"use strict";i.r(e),i.d(e,{default:function(){return Bn}});var s=i(2925),n=i(8914),a=i(9196),o=i(3960),r=i(1050),l=i(
2025-03-24 15:50:23 UTC	602	IN	Data Raw: 75 62 67 72 6f 75 70 22 3a 74 68 69 73 2e 70 72 65 70 65 6e 64 49 63 6f 6e 3b 72 65 74 75 72 6e 20 74 7c 7c 74 68 69 73 2e 24 73 6c 6f 74 73 2e 70 72 65 70 65 6e 64 49 63 6f 6e 3f 74 68 69 73 2e 24 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 56 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 76 2d 6c 69 73 74 2d 67 72 6f 75 70 5f 5f 68 65 61 64 65 72 5f 5f 70 72 65 70 65 6e 64 2d 69 63 6f 6e 22 7d 2c 5b 74 68 69 73 2e 24 73 6c 6f 74 73 2e 70 72 65 70 65 6e 64 49 63 6f 6e 7c 7c 74 68 69 73 2e 67 65 6e 49 63 6f 6e 28 74 29 5d 29 3a 6e 75 6c 6c 7d 2c 6f 6e 52 6f 75 74 65 43 68 61 6e 67 65 28 74 29 7b 69 66 28 21 74 68 69 73 2e 67 72 6f 75 70 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 6d 61 74 63 68 52 6f 75 74 65 28 74 2e 70 61 74 68 29 3b 65 Data Ascii: ubgroup":this.prependIcon;return t\|\|this.$slots.prependIcon?this.$createElement(V,{staticClass:"v-list-group__header__prepend-icon"},[this.$slots.prependIcon\|\|this.genIcon(t)]):null},onRouteChange(t){if(!this.group)return;const e=this.matchRoute(t.path);e
2025-03-24 15:50:23 UTC	16384	IN	Data Raw: 67 65 6e 48 65 61 64 65 72 28 29 2c 74 28 70 2e 46 78 2c 74 68 69 73 2e 67 65 6e 49 74 65 6d 73 28 29 29 5d 29 7d 7d 29 2c 28 30 2c 6c 2e 5a 29 28 42 2c 6e 2e 5a 29 2e 65 78 74 65 6e 64 28 7b 6e 61 6d 65 3a 22 76 2d 6c 69 73 74 2d 69 74 65 6d 2d 67 72 6f 75 70 22 2c 70 72 6f 76 69 64 65 28 29 7b 72 65 74 75 72 6e 7b 69 73 49 6e 47 72 6f 75 70 3a 21 30 2c 6c 69 73 74 49 74 65 6d 47 72 6f 75 70 3a 74 68 69 73 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 63 6c 61 73 73 65 73 28 29 7b 72 65 74 75 72 6e 7b 2e 2e 2e 42 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 75 74 65 64 2e 63 6c 61 73 73 65 73 2e 63 61 6c 6c 28 74 68 69 73 29 2c 22 76 2d 6c 69 73 74 2d 69 74 65 6d 2d 67 72 6f 75 70 22 3a 21 30 7d 7d 7d 2c 6d 65 74 68 6f 64 73 3a 7b 67 65 6e 44 61 74 61 28 29 7b 72 65 Data Ascii: genHeader(),t(p.Fx,this.genItems())])}}),(0,l.Z)(B,n.Z).extend({name:"v-list-item-group",provide(){return{isInGroup:!0,listItemGroup:this}},computed:{classes(){return{...B.options.computed.classes.call(this),"v-list-item-group":!0}}},methods:{genData(){re
2025-03-24 15:50:23 UTC	16384	IN	Data Raw: 78 74 2d 63 65 6e 74 65 72 22 2c 63 6c 61 73 73 3a 7b 22 70 6c 2d 36 22 3a 74 2e 24 76 75 65 74 69 66 79 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 73 6d 41 6e 64 55 70 7d 2c 61 74 74 72 73 3a 7b 63 6f 6c 73 3a 22 31 32 22 2c 6d 64 3a 22 33 22 2c 73 6d 3a 22 34 22 7d 7d 2c 5b 65 28 59 2e 5a 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 69 6d 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 2d 6c 6f 61 64 65 72 20 6d 74 2d 32 20 6d 78 2d 61 75 74 6f 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 22 2c 61 74 74 72 73 3a 7b 68 65 69 67 68 74 3a 22 61 75 74 6f 22 2c 6c 6f 61 64 69 6e 67 3a 74 2e 66 65 74 63 68 69 6e 67 42 72 61 6e 64 44 65 74 61 69 6c 73 7c 7c 69 2c 22 6d 61 78 2d 68 65 69 67 68 74 22 3a 22 31 38 38 70 78 22 2c 74 79 70 65 3a 22 69 6d 61 67 65 22 7d 7d 2c 5b 65 Data Ascii: xt-center",class:{"pl-6":t.$vuetify.breakpoint.smAndUp},attrs:{cols:"12",md:"3",sm:"4"}},[e(Y.Z,{staticClass:"image-skeleton-loader mt-2 mx-auto overflow-hidden",attrs:{height:"auto",loading:t.fetchingBrandDetails\|\|i,"max-height":"188px",type:"image"}},[e
2025-03-24 15:50:23 UTC	1024	IN	Data Raw: 28 74 29 7d 60 3a 76 6f 69 64 20 30 7d 2c 5b 74 68 69 73 2e 24 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 75 2c 64 2c 6e 29 5d 29 7d 2c 67 65 6e 49 6e 70 75 74 53 6c 6f 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 74 68 69 73 2e 73 65 74 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 28 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 76 2d 69 6e 70 75 74 5f 5f 73 6c 6f 74 22 2c 73 74 79 6c 65 3a 7b 68 65 69 67 68 74 3a 28 30 2c 72 2e 6b 62 29 28 74 68 69 73 2e 68 65 69 67 68 74 29 7d 2c 6f 6e 3a 7b 63 6c 69 63 6b 3a 74 68 69 73 2e 6f 6e 43 6c 69 63 6b 2c 6d 6f 75 73 65 64 6f 77 6e 3a 74 68 69 73 2e 6f 6e 4d 6f 75 73 65 44 6f 77 6e 2c 6d Data Ascii: (t)}`:void 0},[this.$createElement(u,d,n)])},genInputSlot(){return this.$createElement("div",this.setBackgroundColor(this.backgroundColor,{staticClass:"v-input__slot",style:{height:(0,r.kb)(this.height)},on:{click:this.onClick,mousedown:this.onMouseDown,m
2025-03-24 15:50:23 UTC	2754	IN	Data Raw: 68 69 73 2e 24 73 6c 6f 74 73 2e 70 72 65 70 65 6e 64 29 3a 74 68 69 73 2e 70 72 65 70 65 6e 64 49 63 6f 6e 26 26 74 2e 70 75 73 68 28 74 68 69 73 2e 67 65 6e 49 63 6f 6e 28 22 70 72 65 70 65 6e 64 22 29 29 2c 74 68 69 73 2e 67 65 6e 53 6c 6f 74 28 22 70 72 65 70 65 6e 64 22 2c 22 6f 75 74 65 72 22 2c 74 29 7d 2c 67 65 6e 41 70 70 65 6e 64 53 6c 6f 74 28 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 73 6c 6f 74 73 2e 61 70 70 65 6e 64 3f 74 2e 70 75 73 68 28 74 68 69 73 2e 24 73 6c 6f 74 73 2e 61 70 70 65 6e 64 29 3a 74 68 69 73 2e 61 70 70 65 6e 64 49 63 6f 6e 26 26 74 2e 70 75 73 68 28 74 68 69 73 2e 67 65 6e 49 63 6f 6e 28 22 61 70 70 65 6e 64 22 29 29 2c 74 68 69 73 2e 67 65 6e 53 6c 6f 74 28 22 61 70 70 65 6e 64 22 2c Data Ascii: his.$slots.prepend):this.prependIcon&&t.push(this.genIcon("prepend")),this.genSlot("prepend","outer",t)},genAppendSlot(){const t=[];return this.$slots.append?t.push(this.$slots.append):this.appendIcon&&t.push(this.genIcon("append")),this.genSlot("append",
2025-03-24 15:50:23 UTC	15345	IN	Data Raw: 73 69 6e 67 6c 65 4c 69 6e 65 3a 42 6f 6f 6c 65 61 6e 2c 73 6f 6c 6f 3a 42 6f 6f 6c 65 61 6e 2c 73 6f 6c 6f 49 6e 76 65 72 74 65 64 3a 42 6f 6f 6c 65 61 6e 2c 73 75 66 66 69 78 3a 53 74 72 69 6e 67 2c 74 79 70 65 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 74 65 78 74 22 7d 7d 2c 64 61 74 61 3a 28 29 3d 3e 28 7b 62 61 64 49 6e 70 75 74 3a 21 31 2c 6c 61 62 65 6c 57 69 64 74 68 3a 30 2c 70 72 65 66 69 78 57 69 64 74 68 3a 30 2c 70 72 65 70 65 6e 64 57 69 64 74 68 3a 30 2c 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 6e 75 6c 6c 2c 69 73 42 6f 6f 74 65 64 3a 21 31 2c 69 73 43 6c 65 61 72 69 6e 67 3a 21 31 7d 29 2c 63 6f 6d 70 75 74 65 64 3a 7b 63 6c 61 73 73 65 73 28 29 7b 72 65 74 75 72 6e 7b 2e 2e 2e 62 74 2e 6f 70 74 69 6f 6e 73 2e 63 Data Ascii: singleLine:Boolean,solo:Boolean,soloInverted:Boolean,suffix:String,type:{type:String,default:"text"}},data:()=>({badInput:!1,labelWidth:0,prefixWidth:0,prependWidth:0,initialValue:null,isBooted:!1,isClearing:!1}),computed:{classes(){return{...bt.options.c
2025-03-24 15:50:23 UTC	16384	IN	Data Raw: 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 73 2e 61 63 74 69 76 61 74 6f 72 2c 65 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 73 2e 63 6f 6e 74 65 6e 74 2c 69 3d 28 21 31 21 3d 3d 74 68 69 73 2e 61 74 74 61 63 68 3f 74 2e 6f 66 66 73 65 74 4c 65 66 74 3a 74 2e 6c 65 66 74 29 7c 7c 30 2c 73 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 77 69 64 74 68 2c 65 2e 77 69 64 74 68 29 3b 6c 65 74 20 6e 3d 30 3b 69 66 28 6e 2b 3d 69 2c 28 74 68 69 73 2e 6c 65 66 74 7c 7c 74 68 69 73 2e 24 76 75 65 74 69 66 79 2e 72 74 6c 26 26 21 74 68 69 73 2e 72 69 67 68 74 29 26 26 28 6e 2d 3d 73 2d 74 2e 77 69 64 74 68 29 2c 74 68 69 73 2e 6f 66 66 73 65 74 58 29 7b 63 6f 6e 73 74 20 65 3d 69 73 4e 61 4e 28 4e 75 6d 62 65 72 28 74 68 69 73 2e 6d 61 78 57 69 64 74 Data Ascii: const t=this.dimensions.activator,e=this.dimensions.content,i=(!1!==this.attach?t.offsetLeft:t.left)\|\|0,s=Math.max(t.width,e.width);let n=0;if(n+=i,(this.left\|\|this.$vuetify.rtl&&!this.right)&&(n-=s-t.width),this.offsetX){const e=isNaN(Number(this.maxWidt
2025-03-24 15:50:23 UTC	1669	IN	Data Raw: 61 6e 67 6f 2d 63 61 72 64 2d 6f 70 65 6e 2d 6c 6f 6f 70 2d 63 61 72 64 2d 63 72 65 64 65 6e 74 69 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 69 64 3a 22 66 6f 72 6d 61 74 74 65 64 2d 61 6d 6f 75 6e 74 2d 6c 61 72 67 65 22 2c 22 69 73 2d 6c 6f 61 64 69 6e 67 22 3a 69 2c 22 69 73 2d 6c 70 65 2d 75 6e 62 6f 78 69 6e 67 2d 73 70 6c 69 74 2d 6f 6e 22 3a 74 2e 69 73 4c 70 65 55 6e 62 6f 78 69 6e 67 53 70 6c 69 74 4f 6e 2c 6c 61 62 65 6c 3a 74 2e 24 74 28 22 74 63 2d 6f 70 65 6e 2d 6c 6f 6f 70 2d 70 72 6f 64 75 63 74 2e 73 74 61 72 74 69 6e 67 2d 62 61 6c 61 6e 63 65 22 29 2c 22 73 68 6f 77 2d 63 6f 70 79 2d 62 75 74 74 6f 6e 22 3a 22 22 2c 76 61 6c 75 65 3a 74 2e 66 6f 72 6d 61 74 74 65 64 41 6d 6f 75 6e 74 7d 7d 29 5d 2c 31 29 3a 74 2e 5f 65 28 29 2c 74 2e 72 65 77 Data Ascii: ango-card-open-loop-card-credential",{attrs:{id:"formatted-amount-large","is-loading":i,"is-lpe-unboxing-split-on":t.isLpeUnboxingSplitOn,label:t.$t("tc-open-loop-product.starting-balance"),"show-copy-button":"",value:t.formattedAmount}})],1):t._e(),t.rew
2025-03-24 15:50:23 UTC	1418	IN	Data Raw: 2e 69 73 4c 70 65 55 6e 62 6f 78 69 6e 67 53 70 6c 69 74 4f 6e 2c 6c 61 62 65 6c 3a 74 2e 24 74 28 22 74 63 2d 6f 70 65 6e 2d 6c 6f 6f 70 2d 70 72 6f 64 75 63 74 2e 73 74 61 72 74 69 6e 67 2d 62 61 6c 61 6e 63 65 22 29 2c 76 61 6c 75 65 3a 74 2e 66 6f 72 6d 61 74 74 65 64 41 6d 6f 75 6e 74 7d 7d 29 5d 2c 31 29 3a 74 2e 5f 65 28 29 2c 74 2e 72 65 77 61 72 64 42 61 6c 61 6e 63 65 26 26 21 74 2e 69 73 45 78 70 69 72 65 64 4f 70 65 6e 4c 6f 6f 70 50 72 6f 64 75 63 74 3f 65 28 78 2e 5a 2c 7b 61 74 74 72 73 3a 7b 73 6d 3a 22 36 22 7d 7d 2c 5b 65 28 22 74 61 6e 67 6f 2d 63 61 72 64 2d 6f 70 65 6e 2d 6c 6f 6f 70 2d 63 61 72 64 2d 63 72 65 64 65 6e 74 69 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 69 64 3a 22 66 6f 72 6d 61 74 74 65 64 2d 72 65 6d 61 69 6e 69 6e 67 2d 6d Data Ascii: .isLpeUnboxingSplitOn,label:t.$t("tc-open-loop-product.starting-balance"),value:t.formattedAmount}})],1):t._e(),t.rewardBalance&&!t.isExpiredOpenLoopProduct?e(x.Z,{attrs:{sm:"6"}},[e("tango-card-open-loop-card-credential",{attrs:{id:"formatted-remaining-m

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:22 UTC	605	OUT	POST /js/ HTTP/1.1 Host: dd.blackhawknetwork.com Connection: keep-alive Content-Length: 4242 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://secure.rewardcodes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:22 UTC	4242	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 6f 70 74 73 25 32 32 25 33 41 25 32 32 25 37 42 25 35 43 25 32 32 61 6a 61 78 4c 69 73 74 65 6e 65 72 50 61 74 68 25 35 43 25 32 32 25 33 41 25 35 42 25 35 43 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 70 69 2e 72 65 77 61 72 64 63 6f 64 65 73 2e 63 6f 6d 25 35 43 25 32 32 25 35 44 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 42 79 48 65 61 64 65 72 25 35 43 25 32 32 25 33 41 74 72 75 65 25 37 44 25 32 32 25 32 43 25 32 32 78 68 72 5f 6f 70 74 73 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 74 73 74 25 32 32 25 33 41 33 31 2e 36 30 30 30 30 30 30 30 30 30 32 30 33 37 33 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 68 63 25 32 32 25 33 41 34 25 32 43 25 32 Data Ascii: jsData=%7B%22opts%22%3A%22%7B%5C%22ajaxListenerPath%5C%22%3A%5B%5C%22https%3A%2F%2Fapi.rewardcodes.com%5C%22%5D%2C%5C%22sessionByHeader%5C%22%3Atrue%7D%22%2C%22xhr_opts%22%3A%22%22%2C%22ttst%22%3A31.600000000020373%2C%22ifov%22%3Afalse%2C%22hc%22%3A4%2C%2
2025-03-24 15:50:22 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 236 Connection: close Date: Mon, 24 Mar 2025 15:50:22 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: DataDome Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-Cache: Miss from cloudfront Via: 1.1 687bf9bb2353af127d0a3c49056e960c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: uuWiVURjEBEoyu85bJsUiObPz11RDJipXFsEhg9LGtRvnAQm8AuDgQ== X-Content-Type-Options: nosniff Access-Control-Allow-Origin: *
2025-03-24 15:50:22 UTC	236	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 75 31 78 5a 46 76 37 52 6a 62 4e 71 51 4d 41 6f 69 52 5a 6c 6b 59 6e 36 35 4e 73 4c 69 65 43 6a 6c 4d 4f 55 43 6d 6b 30 31 33 56 51 64 32 38 57 41 49 7e 74 61 69 76 58 68 32 4e 31 35 47 4b 79 35 54 46 51 46 50 67 6c 50 71 6f 6d 32 38 6a 6b 6a 62 5a 6c 4c 55 6d 31 55 30 41 43 67 37 48 58 6a 62 7e 4e 75 47 57 63 31 62 32 70 31 69 64 5a 47 44 54 33 44 63 66 45 6f 6e 61 4e 47 78 34 36 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 72 65 77 61 72 64 63 6f 64 65 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=u1xZFv7RjbNqQMAoiRZlkYn65NsLieCjlMOUCmk013VQd28WAI~taivXh2N15GKy5TFQFPglPqom28jkjbZlLUm1U0ACg7HXjb~NuGWc1b2p1idZGDT3DcfEonaNGx46; Max-Age=31536000; Domain=.rewardcodes.com; Path=/; Secure; SameSite=Lax"}

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:23 UTC	576	OUT	OPTIONS /r2/1/rewards/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-/brand/en_US HTTP/1.1 Host: api.rewardcodes.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-datadome-clientid Origin: https://secure.rewardcodes.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:23 UTC	639	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:50:23 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: x-datadome-clientid Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS,HEAD,PATCH Access-Control-Allow-Origin: https://secure.rewardcodes.com Access-Control-Expose-Headers: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Expires: 0 Pragma: no-cache Referrer-Policy: no-referrer Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Xss-Protection: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:23 UTC	390	OUT	GET /js/ HTTP/1.1 Host: dd.blackhawknetwork.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:23 UTC	524	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 319 Connection: close Date: Mon, 24 Mar 2025 15:50:23 GMT Cache-Control: must-revalidate,no-cache,no-store X-Cache: Error from cloudfront Via: 1.1 616cc46c05372de12125d489da3bca56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: KCYg5M8ddAvUL6xwCqH1TcoqWwY75gwbr3CmPoqyS4pzO7VIIZT5_Q== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Vary: Origin
2025-03-24 15:50:23 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://codes.rewardcodes.com/r2/1/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:23 UTC	789	OUT	GET /r2/1/rewards/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-/brand/en_US HTTP/1.1 Host: api.rewardcodes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" x-datadome-clientid: .keep sec-ch-ua-mobile: ?0 Accept: / Origin: https://secure.rewardcodes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: datadome=u1xZFv7RjbNqQMAoiRZlkYn65NsLieCjlMOUCmk013VQd28WAI~taivXh2N15GKy5TFQFPglPqom28jkjbZlLUm1U0ACg7HXjb~NuGWc1b2p1idZGDT3DcfEonaNGx46
2025-03-24 15:50:23 UTC	1377	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:50:23 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Accept-Ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://secure.rewardcodes.com Access-Control-Expose-Headers: x-set-cookie, x-dd-b Cache-Control: no-cache, no-store, max-age=0, must-revalidate Expires: 0 Pragma: no-cache Referrer-Policy: no-referrer Set-Cookie: AWSALB=2uwveSxrpLm+8qhGJFgimziP6P07QElzZDbklg5+jZH5DrKdRdlv1RrAdBPTwpWUQnaNX8/trasnKLpXo+RO5WRdIm1q4C4cRHqW1xe9knwEqHBGDUxaeGHZrBm1; Expires=Mon, 31 Mar 2025 15:50:23 GMT; Path=/ Set-Cookie: AWSALBCORS=2uwveSxrpLm+8qhGJFgimziP6P07QElzZDbklg5+jZH5DrKdRdlv1RrAdBPTwpWUQnaNX8/trasnKLpXo+RO5WRdIm1q4C4cRHqW1xe9knwEqHBGDUxaeGHZrBm1; Expires=Mon, 31 Mar 2025 15:50:23 GMT; Path=/; SameSite=None; Secure Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-Datadome: protected X-Frame-Options: DENY X-Request-Id: 6d4d0a25-738d-4bfe-901b-fefdd76fbce5 X-Set-Cookie: datadome=s0T6pbvJIFlWGco9X2KEeqNug_FNUIOZsmgYyMpKE7fckzDJ6Salur80OHB8eYG0kJPkA68oKehYdbI7SrSa~Et3JwFusMwvC7u_khDBPw5pcxjCVHISh8m75fsLmKpS; Max-Age=31536000; Domain=.rewardcodes.com; Path=/; Secure; SameSite=Lax X-Xss-Protection: 0
2025-03-24 15:50:23 UTC	4492	IN	Data Raw: 31 31 38 34 0d 0a 7b 0a 20 20 22 72 65 77 61 72 64 4e 61 6d 65 22 20 3a 20 22 4d 61 72 73 68 61 6c 6c 73 20 65 47 69 66 74 20 43 61 72 64 22 2c 0a 20 20 22 61 6d 6f 75 6e 74 22 20 3a 20 32 35 2e 30 30 2c 0a 20 20 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 20 3a 20 22 55 53 44 22 2c 0a 20 20 22 74 65 72 6d 73 41 6e 64 43 6f 6e 64 69 74 69 6f 6e 73 22 20 3a 20 22 3c 70 3e 54 52 45 41 54 20 49 54 20 41 53 20 59 4f 55 20 57 4f 55 4c 44 20 43 41 53 48 2e 3c 2f 70 3e 5c 6e 5c 6e 3c 70 3e 46 6f 72 20 62 61 6c 61 6e 63 65 20 69 6e 71 75 69 72 79 2c 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 6d 6f 73 74 20 72 65 63 65 6e 74 20 72 65 63 65 69 70 74 2c 20 76 69 73 69 74 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 6a 6d 61 78 78 Data Ascii: 1184{ "rewardName" : "Marshalls eGift Card", "amount" : 25.00, "currencyCode" : "USD", "termsAndConditions" : "<p>TREAT IT AS YOU WOULD CASH.</p>\n\n<p>For balance inquiry, please check your most recent receipt, visit <a href=\"http://www.tjmaxx
2025-03-24 15:50:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:23 UTC	712	OUT	GET /favicon.ico HTTP/1.1 Host: secure.rewardcodes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: datadome=u1xZFv7RjbNqQMAoiRZlkYn65NsLieCjlMOUCmk013VQd28WAI~taivXh2N15GKy5TFQFPglPqom28jkjbZlLUm1U0ACg7HXjb~NuGWc1b2p1idZGDT3DcfEonaNGx46
2025-03-24 15:50:24 UTC	830	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 285478 Connection: close Date: Mon, 24 Mar 2025 15:50:25 GMT Last-Modified: Mon, 27 Jan 2025 20:42:06 GMT ETag: "a350a5a9c34a8356d12e3f418933672a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate X-Robots-Tag: noindex, nofollow X-Frame-Options: ALLOWA X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin X-Cache: Miss from cloudfront Via: 1.1 16ef2ce41ee63b7d045e809201991b04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: faER65yivQK2NFqFfnxX1pem_RHo_3AfDNryHxd5y1p51lO-LHKPPQ==
2025-03-24 15:50:24 UTC	15554	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 56 15 00 00 00 00 00 00 01 00 20 00 28 20 04 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 5c ef 30 23 5d ef 9c 23 5c ef dc 24 5d f0 fa 24 5d f0 fa 23 5c f0 da 23 5d ef 98 22 5c ef 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 60 ef 08 23 5c ef 98 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 23 5c ef 98 20 60 ef 08 00 00 00 00 00 00 00 00 00 00 00 00 20 60 ef 08 23 5d ef b8 24 5d f0 ff 24 Data Ascii: hF 00 %V ( :( "\0#]#\$]$]#\#]"\, `#\$]$]$]$]$]$]$]$]#\ ` `#]$]$
2025-03-24 15:50:24 UTC	1442	IN	Data Raw: 23 5c ef a0 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 24 5c f0 ce 23 5d f1 9e 23 5d f1 9e 23 5d f1 9e 23 5d f1 9e 23 5d f1 9e 23 5d f1 9e 23 5d f1 9e 23 5d f1 9e 23 5d ef 60 23 5d ef 60 23 5d ef 60 23 5d ef 60 23 5d ef 60 23 5d ef 60 23 5d ef Data Ascii: #\$\$\$\$\$\$\$\$\$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$\$\$\$\$\$\$\$\#]#]#]#]#]#]#]#]#]`#]`#]`#]`#]`#]`#]
2025-03-24 15:50:24 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-24 15:50:24 UTC	1024	IN	Data Raw: ef 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-24 15:50:24 UTC	16384	IN	Data Raw: ef 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-24 15:50:24 UTC	1024	IN	Data Raw: f0 ff 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: #]#]#]#]#]#]#]#] ` ` ` ` ` ` ` `
2025-03-24 15:50:24 UTC	16384	IN	Data Raw: f0 ff 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: #]#]#]#]#]#]#]#] ` ` ` ` ` ` ` `
2025-03-24 15:50:24 UTC	16384	IN	Data Raw: f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 23 5d f0 de 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: $]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]#]#]#]#]#]#]#]#]
2025-03-24 15:50:24 UTC	16384	IN	Data Raw: f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 60 ef 20 20 Data Ascii: $]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$] ` ` ` ` ` ` ` ` ` ` ` ` ` ` `
2025-03-24 15:50:24 UTC	16384	IN	Data Raw: f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 24 5d f0 ff 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 20 60 ef 10 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 5d f0 ee 24 Data Ascii: $]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$]$] ` ` ` ` ` ` ` ` ` ` ` ` ` ` ` `$]$]$]$]$]$]$]$

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:23 UTC	555	OUT	GET /assets/cmV3YXJkY29kZXMuY29t HTTP/1.1 Host: ht.blackhawknetwork.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:24 UTC	338	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:50:23 GMT Content-Type: application/javascript Content-Length: 384 Connection: close x-amzn-RequestId: a6b80840-28df-4581-abf3-eec75b33dd2b x-amz-apigw-id: H8DSDHvziYcEvOQ= X-Amzn-Trace-Id: Root=1-67e17f3f-0a734f366129dcb05644efbd;Parent=60e6ad8ffe510f32;Sampled=0;Lineage=1:13ba6a0f:0
2025-03-24 15:50:24 UTC	384	IN	Data Raw: 76 61 72 20 78 20 3d 20 61 74 6f 62 28 22 63 6d 56 33 59 58 4a 6b 59 32 39 6b 5a 58 4d 75 59 32 39 74 22 29 3b 76 61 72 20 74 65 6d 70 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 2e 73 70 6c 69 74 28 22 2e 22 29 2e 72 65 76 65 72 73 65 28 29 3b 76 61 72 20 72 6f 6f 74 5f 64 6f 6d 61 69 6e 20 3d 20 74 65 6d 70 5b 31 5d 20 2b 20 22 2e 22 20 2b 20 74 65 6d 70 5b 30 5d 3b 76 61 72 20 6d 20 3d 20 78 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 69 6e 64 28 73 20 3d 3e 20 72 6f 6f 74 5f 64 6f 6d 61 69 6e 2e 69 6e 63 6c 75 64 65 73 28 73 29 20 7c 7c 20 73 2e 69 6e 63 6c 75 64 65 73 28 72 6f 6f 74 5f 64 6f 6d 61 69 6e 29 29 3b 69 66 28 21 6d 29 20 7b 76 61 72 20 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 76 61 72 20 72 20 Data Ascii: var x = atob("cmV3YXJkY29kZXMuY29t");var temp = location.host.split(".").reverse();var root_domain = temp[1] + "." + temp[0];var m = x.split(",").find(s => root_domain.includes(s) \|\| s.includes(root_domain));if(!m) {var l = encodeURI(location.href);var r

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:24 UTC	553	OUT	OPTIONS /api/mySegments/P-b54d92e49c0200d524d772a5d5b451ec HTTP/1.1 Host: sdk.split.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,content-type,splitsdkversion Origin: https://secure.rewardcodes.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:24 UTC	753	IN	HTTP/1.1 200 OK Connection: close Content-Length: 37 Server: Varnish Retry-After: 0 Allow: HEAD,GET,OPTIONS,POST,PUT,DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept, Authorization, Content-Length, X-User-Token, X-Request-ID, SplitSDKMachineName, SplitSDKMachineIP, SplitSDKVersion, Cache-Control Access-Control-Allow-Methods: GET,PUT,POST,PATCH,DELETE,OPTIONS Access-Control-Max-Age: 7200 Accept-Ranges: bytes Date: Mon, 24 Mar 2025 15:50:24 GMT Via: 1.1 varnish X-Served-By: cache-lga21967-LGA X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1742831424.460464,VS0,VE0 Vary: Cookie Strict-Transport-Security: max-age=15770000; includeSubdomains Access-Control-Allow-Origin: https://secure.rewardcodes.com
2025-03-24 15:50:24 UTC	37	IN	Data Raw: 48 45 41 44 2c 20 47 45 54 2c 20 4f 50 54 49 4f 4e 53 2c 20 50 4f 53 54 2c 20 50 55 54 2c 20 44 45 4c 45 54 45 Data Ascii: HEAD, GET, OPTIONS, POST, PUT, DELETE

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:24 UTC	572	OUT	OPTIONS /api/splitChanges?s=1.1&since=-1&names=LPE-unboxing,RL-3574-banner-ad HTTP/1.1 Host: sdk.split.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,content-type,splitsdkversion Origin: https://secure.rewardcodes.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:24 UTC	753	IN	HTTP/1.1 200 OK Connection: close Content-Length: 37 Server: Varnish Retry-After: 0 Allow: HEAD,GET,OPTIONS,POST,PUT,DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept, Authorization, Content-Length, X-User-Token, X-Request-ID, SplitSDKMachineName, SplitSDKMachineIP, SplitSDKVersion, Cache-Control Access-Control-Allow-Methods: GET,PUT,POST,PATCH,DELETE,OPTIONS Access-Control-Max-Age: 7200 Accept-Ranges: bytes Date: Mon, 24 Mar 2025 15:50:24 GMT Via: 1.1 varnish X-Served-By: cache-lga21939-LGA X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1742831424.463004,VS0,VE0 Vary: Cookie Strict-Transport-Security: max-age=15770000; includeSubdomains Access-Control-Allow-Origin: https://secure.rewardcodes.com
2025-03-24 15:50:24 UTC	37	IN	Data Raw: 48 45 41 44 2c 20 47 45 54 2c 20 4f 50 54 49 4f 4e 53 2c 20 50 4f 53 54 2c 20 50 55 54 2c 20 44 45 4c 45 54 45 Data Ascii: HEAD, GET, OPTIONS, POST, PUT, DELETE

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:24 UTC	563	OUT	OPTIONS /api/v2/auth?s=1.1&users=P-b54d92e49c0200d524d772a5d5b451ec HTTP/1.1 Host: auth.split.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,content-type,splitsdkversion Origin: https://secure.rewardcodes.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:24 UTC	697	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:50:24 GMT Content-Type: application/json; charset=utf-8 Content-Length: 4 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept, Authorization, Content-Length, X-User-Token, X-Request-ID, SplitSDKMachineName, SplitSDKMachineIP, SplitSDKVersion Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: https://secure.rewardcodes.com Strict-Transport-Security: max-age=15770000; includeSubDomains x-content-type-options: nosniff x-frame-options: DENY content-security-policy: frame-ancestors 'self' x-permitted-cross-domain-policies: master-only
2025-03-24 15:50:24 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:24 UTC	889	OUT	GET /r2/1/rewards/rPZ4Nj5cTC3kOoflT8YQBZLNe4lj6F1eG50m4tUvks8XQ_B-gUWdTkPqjmRlzT1-/brand/en_US HTTP/1.1 Host: api.rewardcodes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: datadome=u1xZFv7RjbNqQMAoiRZlkYn65NsLieCjlMOUCmk013VQd28WAI~taivXh2N15GKy5TFQFPglPqom28jkjbZlLUm1U0ACg7HXjb~NuGWc1b2p1idZGDT3DcfEonaNGx46; AWSALB=2uwveSxrpLm+8qhGJFgimziP6P07QElzZDbklg5+jZH5DrKdRdlv1RrAdBPTwpWUQnaNX8/trasnKLpXo+RO5WRdIm1q4C4cRHqW1xe9knwEqHBGDUxaeGHZrBm1; AWSALBCORS=2uwveSxrpLm+8qhGJFgimziP6P07QElzZDbklg5+jZH5DrKdRdlv1RrAdBPTwpWUQnaNX8/trasnKLpXo+RO5WRdIm1q4C4cRHqW1xe9knwEqHBGDUxaeGHZrBm1
2025-03-24 15:50:25 UTC	1221	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:50:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Accept-Ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Cache-Control: no-cache, no-store, max-age=0, must-revalidate Expires: 0 Pragma: no-cache Referrer-Policy: no-referrer Set-Cookie: datadome=cvEFhtWCsbXmbnuHFif8oKUsYFtckMl50c0BOTgDDj4l~VTDauDxsOThaweQUtSjH2U0N5cpZBqayVFzXuPZ5K7lZWYL7v0SxLyWfCy1V2CZmmL1Nbrz6ZDo~1sslGgg; Max-Age=31536000; Domain=.rewardcodes.com; Path=/; Secure; SameSite=Lax Set-Cookie: AWSALB=RclhVG5E8rijGplIn6vMUFSIN2mEIzcuK6wCZr4G0Q1a9i1cljbeR+mvWHibHHl/SbojWe+lMJF0cGNvbCy+JEo1gkdzb3m1ubrrd6Ey8D9jlpywmmHn5d1Pn+Ds; Expires=Mon, 31 Mar 2025 15:50:24 GMT; Path=/ Set-Cookie: AWSALBCORS=RclhVG5E8rijGplIn6vMUFSIN2mEIzcuK6wCZr4G0Q1a9i1cljbeR+mvWHibHHl/SbojWe+lMJF0cGNvbCy+JEo1gkdzb3m1ubrrd6Ey8D9jlpywmmHn5d1Pn+Ds; Expires=Mon, 31 Mar 2025 15:50:24 GMT; Path=/; SameSite=None; Secure Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-Datadome: protected X-Frame-Options: DENY X-Request-Id: 8f4f68bb-81aa-488a-891e-ff2710d0d83e X-Xss-Protection: 0
2025-03-24 15:50:25 UTC	4492	IN	Data Raw: 31 31 38 34 0d 0a 7b 0a 20 20 22 72 65 77 61 72 64 4e 61 6d 65 22 20 3a 20 22 4d 61 72 73 68 61 6c 6c 73 20 65 47 69 66 74 20 43 61 72 64 22 2c 0a 20 20 22 61 6d 6f 75 6e 74 22 20 3a 20 32 35 2e 30 30 2c 0a 20 20 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 20 3a 20 22 55 53 44 22 2c 0a 20 20 22 74 65 72 6d 73 41 6e 64 43 6f 6e 64 69 74 69 6f 6e 73 22 20 3a 20 22 3c 70 3e 54 52 45 41 54 20 49 54 20 41 53 20 59 4f 55 20 57 4f 55 4c 44 20 43 41 53 48 2e 3c 2f 70 3e 5c 6e 5c 6e 3c 70 3e 46 6f 72 20 62 61 6c 61 6e 63 65 20 69 6e 71 75 69 72 79 2c 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 6d 6f 73 74 20 72 65 63 65 6e 74 20 72 65 63 65 69 70 74 2c 20 76 69 73 69 74 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 6a 6d 61 78 78 Data Ascii: 1184{ "rewardName" : "Marshalls eGift Card", "amount" : 25.00, "currencyCode" : "USD", "termsAndConditions" : "<p>TREAT IT AS YOU WOULD CASH.</p>\n\n<p>For balance inquiry, please check your most recent receipt, visit <a href=\"http://www.tjmaxx
2025-03-24 15:50:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:24 UTC	729	OUT	GET /api/splitChanges?s=1.1&since=-1&names=LPE-unboxing,RL-3574-banner-ad HTTP/1.1 Host: sdk.split.io Connection: keep-alive sec-ch-ua-platform: "Windows" Authorization: Bearer phkc4pe5krtf2ummtiqk8c5f2ur2m8nt7r57 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json Content-Type: application/json SplitSDKVersion: javascript-10.27.0 Origin: https://secure.rewardcodes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:25 UTC	813	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2298 Content-Type: application/json; charset=utf-8 access-control-expose-headers: Access-Control-Allow-Origin,X-Request-Id cache-control: no-transform, max-age=60, s-maxage=60 etag: "1732652570979" last-modified: Tue, 26 Nov 2024 20:22:50 GMT strict-transport-security: max-age=15770000; includeSubdomains Via: 1.1 varnish, 1.1 varnish trace: cache-iad-kcgs7200092-IAD-62c819a8-e9b6-44ec-a001-03760f25a0b0; cache-lga21945-LGA-5edfdfb0-d28b-4992-b535-7bfbb818b49d Accept-Ranges: bytes Age: 150294 Date: Mon, 24 Mar 2025 15:50:24 GMT X-Served-By: cache-iad-kcgs7200092-IAD, cache-lga21945-LGA X-Cache: HIT, MISS X-Cache-Hits: 5, 0 X-Timer: S1742831425.955307,VS0,VE9 Vary: Accept-Encoding, Origin, Authorization Access-Control-Allow-Origin: *
2025-03-24 15:50:25 UTC	1378	IN	Data Raw: 7b 22 74 69 6c 6c 22 3a 31 37 33 32 36 35 32 35 37 30 39 37 39 2c 22 73 69 6e 63 65 22 3a 2d 31 2c 22 73 70 6c 69 74 73 22 3a 5b 7b 22 63 68 61 6e 67 65 4e 75 6d 62 65 72 22 3a 31 37 33 32 36 35 32 35 37 30 39 37 39 2c 22 74 72 61 66 66 69 63 54 79 70 65 4e 61 6d 65 22 3a 22 70 6c 61 74 66 6f 72 6d 22 2c 22 6e 61 6d 65 22 3a 22 52 4c 2d 33 35 37 34 2d 62 61 6e 6e 65 72 2d 61 64 22 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 22 3a 31 30 30 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 53 65 65 64 22 3a 34 36 34 32 39 39 34 37 33 2c 22 73 65 65 64 22 3a 2d 35 33 38 37 33 33 35 31 32 2c 22 73 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 6b 69 6c 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 54 72 65 61 74 6d 65 6e 74 Data Ascii: {"till":1732652570979,"since":-1,"splits":[{"changeNumber":1732652570979,"trafficTypeName":"platform","name":"RL-3574-banner-ad","trafficAllocation":100,"trafficAllocationSeed":464299473,"seed":-538733512,"status":"ACTIVE","killed":false,"defaultTreatment
2025-03-24 15:50:25 UTC	920	IN	Data Raw: 75 6c 74 20 72 75 6c 65 22 7d 5d 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 73 65 74 73 22 3a 5b 5d 2c 22 69 6d 70 72 65 73 73 69 6f 6e 73 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 68 61 6e 67 65 4e 75 6d 62 65 72 22 3a 31 37 33 31 34 33 35 30 32 37 32 31 36 2c 22 74 72 61 66 66 69 63 54 79 70 65 4e 61 6d 65 22 3a 22 70 6c 61 74 66 6f 72 6d 22 2c 22 6e 61 6d 65 22 3a 22 4c 50 45 2d 75 6e 62 6f 78 69 6e 67 22 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 22 3a 31 30 30 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 53 65 65 64 22 3a 2d 31 33 31 33 33 33 31 37 37 31 2c 22 73 65 65 64 22 3a 31 34 31 36 34 30 39 31 38 31 2c 22 73 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 6b 69 6c 6c 65 64 Data Ascii: ult rule"}],"configurations":{},"sets":[],"impressionsDisabled":false},{"changeNumber":1731435027216,"trafficTypeName":"platform","name":"LPE-unboxing","trafficAllocation":100,"trafficAllocationSeed":-1313331771,"seed":1416409181,"status":"ACTIVE","killed

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:24 UTC	710	OUT	GET /api/mySegments/P-b54d92e49c0200d524d772a5d5b451ec HTTP/1.1 Host: sdk.split.io Connection: keep-alive sec-ch-ua-platform: "Windows" Authorization: Bearer phkc4pe5krtf2ummtiqk8c5f2ur2m8nt7r57 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json Content-Type: application/json SplitSDKVersion: javascript-10.27.0 Origin: https://secure.rewardcodes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:25 UTC	758	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54 Content-Type: application/json; charset=utf-8 access-control-expose-headers: Access-Control-Allow-Origin,X-Request-Id cache-control: no-transform, max-age=60, s-maxage=60 etag: "776781679" strict-transport-security: max-age=15770000; includeSubdomains Via: 1.1 varnish, 1.1 varnish trace: cache-iad-kcgs7200100-IAD-cee5b918-f86e-4b11-90a9-5175112567b2; cache-lga21943-LGA-7b214b40-078b-4b47-97ce-6492cae606fc Accept-Ranges: bytes Age: 0 Date: Mon, 24 Mar 2025 15:50:24 GMT X-Served-By: cache-iad-kcgs7200100-IAD, cache-lga21943-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1742831425.969479,VS0,VE14 Vary: Accept-Encoding, Origin, Authorization Access-Control-Allow-Origin: *
2025-03-24 15:50:25 UTC	54	IN	Data Raw: 7b 22 6d 79 53 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 61 70 69 2d 6b 65 79 2d 6d 61 6e 61 67 65 6d 65 6e 74 22 2c 22 69 64 22 3a 22 22 7d 5d 7d Data Ascii: {"mySegments":[{"name":"api-key-management","id":""}]}

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:50:24 UTC	720	OUT	GET /api/v2/auth?s=1.1&users=P-b54d92e49c0200d524d772a5d5b451ec HTTP/1.1 Host: auth.split.io Connection: keep-alive sec-ch-ua-platform: "Windows" Authorization: Bearer phkc4pe5krtf2ummtiqk8c5f2ur2m8nt7r57 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json Content-Type: application/json SplitSDKVersion: javascript-10.27.0 Origin: https://secure.rewardcodes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:50:25 UTC	699	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:50:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 695 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept, Authorization, Content-Length, X-User-Token, X-Request-ID, SplitSDKMachineName, SplitSDKMachineIP, SplitSDKVersion Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: https://secure.rewardcodes.com Strict-Transport-Security: max-age=15770000; includeSubDomains x-content-type-options: nosniff x-frame-options: DENY content-security-policy: frame-ancestors 'self' x-permitted-cross-domain-policies: master-only
2025-03-24 15:50:25 UTC	695	IN	Data Raw: 7b 22 70 75 73 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 22 65 79 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 49 73 49 6d 74 70 5a 43 49 36 49 6b 52 51 56 6b 45 33 51 53 34 34 63 7a 68 6e 61 56 45 69 4c 43 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 66 51 2e 65 79 4a 34 4c 57 46 69 62 48 6b 74 59 32 46 77 59 57 4a 70 62 47 6c 30 65 53 49 36 49 6e 74 63 49 6b 31 55 52 58 68 4e 56 45 45 31 54 31 52 5a 4d 30 31 52 50 54 31 66 54 57 70 46 4e 45 39 45 53 58 64 4f 65 6d 73 31 54 6d 63 39 50 56 39 6a 62 32 35 30 63 6d 39 73 58 43 49 36 57 31 77 69 63 33 56 69 63 32 4e 79 61 57 4a 6c 58 43 4a 64 4c 46 77 69 54 56 52 46 65 45 31 55 51 54 56 50 56 46 6b 7a 54 56 45 39 50 56 39 4e 61 6b 55 30 54 30 52 4a 64 30 35 36 61 7a 56 4f 5a 7a 30 Data Ascii: {"pushEnabled":true,"token":"eyJhbGciOiJIUzI1NiIsImtpZCI6IkRQVkE3QS44czhnaVEiLCJ0eXAiOiJKV1QifQ.eyJ4LWFibHktY2FwYWJpbGl0eSI6IntcIk1URXhNVEE1T1RZM01RPT1fTWpFNE9ESXdOems1Tmc9PV9jb250cm9sXCI6W1wic3Vic2NyaWJlXCJdLFwiTVRFeE1UQTVPVFkzTVE9PV9NakU0T0RJd056azVOZz0