Edit tour

Windows Analysis Report
https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd

Overview

General Information

Sample URL:	https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd
Analysis ID:	1648160
Infos:

Detection

Invisible JS, Tycoon2FA

Score:	76
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected AntiDebug via timestamp check

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2080,i,14676163167617895315,2956650700509316873,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.26.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.26.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.25.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.25.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.30.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.29..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.8.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.8.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.7.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.7.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 5 entries

HTTP traffic detected: POST /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveContent-Length: 1193sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/jsonsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Origin: https://js.stripe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 25 Mar 2025 14:57:05 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 25 Mar 2025 14:57:06 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 25 Mar 2025 14:57:09 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 14:57:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7s6RX1iabp5I%2BhBxxThKx8PThW5tj%2BhrjbYCNXKE0qL0cSAMYAZnROtvcf6wYAxneLeNWYEh34h5QiObu%2BqIh7%2BcPa8aCNbrAO9H5n3wSVIuSWxWnSIEHtPE0Vuv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=10353&min_rtt=10353&rtt_var=3883&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2230&delivery_rate=275089&cwnd=64&unsent_bytes=0&cid=f67c7a59aa58d277&ts=413&x=0"Cache-Control: max-age=14400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 925f4264aeac0f3d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=105851&min_rtt=105150&rtt_var=22901&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1894&delivery_rate=35424&cwnd=167&unsent_bytes=0&cid=a7967c7beda56e8a&ts=2979&x=0"

Source: chromecache_115.3.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_135.3.dr	String found in binary or memory: http://scripts.sil.org/OFLThis
Source: chromecache_135.3.dr	String found in binary or memory: http://scripts.sil.org/OFLhttps://rsms.me/Rasmus
Source: chromecache_115.3.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_115.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_137.3.dr	String found in binary or memory: https://8SoT.aleonanob.ru/CqUns/
Source: chromecache_137.3.dr	String found in binary or memory: https://OW.aleonanob.ru/CqUns/
Source: chromecache_120.3.dr	String found in binary or memory: https://api.stripe.com
Source: chromecache_117.3.dr	String found in binary or memory: https://assets.stripeassets.com
Source: chromecache_117.3.dr	String found in binary or memory: https://assets.stripeassets.com/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/imt-4b0af9258eafe009c198ce669c18b02f.js
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/store-936f0d847a16164e7f6b15d74659c4a9.html
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-AnimatedCodeEditor-86776e0635434fc49715.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-AnimatedIcon-0b7478e1f9234aae8838.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-AtlasDashboardGraphic-042f01c5c5f7a5d7ca1a.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-BackgroundGlobe-64953aedea5f231d07b7.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Bootstrapper-R432H3EV.js
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-BrandModal-77aed9e8900fc44f1554.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-BrandModalGraphic-e9e1fc8f4c2bf8a9bd44.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CardField-b5eed93d40ea8f24d704.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CaseStudyCard-bfd1dd9dc828a57a4622.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CheckoutFormGraphic-b2509d821651cbc82709.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditor-6eacb8e42c7465ddd557.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditorAsciiLoader-c1a350cb85f7a989f599.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditorAutocomplete-dc62d89d9e2121e48baf.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditorCursor-517911b19e66c94dafbb.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditorLineNumbers-0eded1c84476ec649145.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditorStatusBar-24c7c84123b2b6e4f091.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeSyntax-e0768ef33503219c518d.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeTerminal-ca23848effb056969042.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CopyTitle-c641e014b3946628bc95.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CustomersCaseStudyCardBackground-853f685776c80eaa0
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CustomersCaseStudyCardOverlay-09e527d11b6471566771
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CustomersCaseStudyCarousel-6ad3f0dce85838a77d8b.cs
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CustomersCaseStudyCarouselNavGroup-41fa77c08914b1b
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f66
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-CustomersCaseStudyCarouselNavTrack-1380f9c2e275695
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-DomGraphic-5a317684eb2b9d1f76d2.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-EnterpriseCarouselAside-b05102a0b81de0c11406.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Field-ea906aa31d4012757deb.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Flag-72c7e1f44c2c1c38f9e0.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Form-401d42df82b6e8482f06.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Frontdoor-4513faa7ba2dd8949ee2.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorBillingAnimation-fa25c03988d3d1f36a35.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorBillingGraphic-c9e3aeda05ab14a454b1.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorBillingGraphicLogo-2cee099c6b840fb58d86.c
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.c
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnectAnimation-f4ce77b995975fa55335.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnectFlowDiagram-bcf0320e44c152e1ca03.c
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnectFlowDiagramOrderNotification-12b17
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnectGraphic-30f9ea68cfc29ae65dd5.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnectGraphicCell-18f4786ec794a3671860.c
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnection-192c60d5ff4ac27dec4f.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorGraphic-ab42746a2bb65d850037.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorGraphicImage-ff4d221174ca6cab4402.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorGraphicOutline-cbb29a27650befdb3913.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorIcon-f22f360dadf72ca61a47.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorIconGrid-f5ddeb3e7d94044a9646.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorIconOutline-2c0929473dcd28db2e99.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorIssuingAnimation-ba03e22ccfea12d68c6c.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorIssuingCard-b80b51aa94acdc8a688e.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorPaymentsAnimation-71bdbfda51a40294b593.cs
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorPaymentsGraphic-45fe2caceea82c749c40.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorStandaloneAnimation-5aefb3912ae346b5293e.
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorSubanimation-b9163916332f2a67d464.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorSuiteAnimation-683958a93f82ca151ea7.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Global-f1eeffae1de3242fcca9.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-GlobalizationPicker-cb59e0de1d5c3aeaa184.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Globe-b2159f87180df559d2e8.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-GradientLegend-f1cabc70fbf82f3e9c05.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-GraphicForm-7d75b8ba72e0304da82c.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-GraphicFormField-33f78921d62dc714d424.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-GraphicFormFieldInput-6bd45b6e20fedc7f948a.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-GraphicFormFieldInputGrid-255377d9b46fdf089db8.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-GraphicFormFieldList-5317148749a9268ec04d.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-GridLayout-decb2efdf862023c83af.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.c
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Icon-646136cd9e336d8c18d7.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-InvoicingFeatureGraphic-db95f6cbfa638cca151e.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-List-f0dd86d0ff490fdd7e75.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-LocaleControl-09ce62c550a15bb456e5.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-LowCodeNoCode-de32a3423ce25c839d82.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-MobileStickyNav-5c229e49df6b7e5315d7.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-PaymentLinksFeatureGraphic-6c9382201d4ede7c851a.cs
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Picture-3f0067e6b392244c9bda.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-ProductBadge-aa2497ab8abdcc6a3d34.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-ProductFeatureCard-4476eb8c383446c052aa.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-ProductListing-3e17d7acee941b127dd1.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-RowLayout-9272a8ee72d3dac4a6ef.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-SiteFooterSection-801324a67f6b0168e107.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-SiteFooterSectionSupportLinkList-US-bf39e598e6b8da
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-StartUp-889f28d89767c8a9d60f.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Stripe-b3679504f08482f96a0d.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-StripeProductUsed-448c2bc0913c408517f4.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-StripeProductUsedList-9d35065b7106fd9143c1.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-StripeSet-423109ad4bf57a2a011c.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1-Track-2f2fce741fc3d8fc8450.css
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1/1a930247.woff2)
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1/ac6713d5.woff)
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1/f965fdf4.woff2
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/v1/f965fdf4.woff2)
Source: chromecache_117.3.dr	String found in binary or memory: https://b.stripecdn.com/stripethirdparty-srv/assets/
Source: chromecache_118.3.dr, chromecache_127.3.dr, chromecache_126.3.dr	String found in binary or memory: https://cdn.firstpromoter.com/fpr.js
Source: chromecache_117.3.dr	String found in binary or memory: https://dashboard.stripe.com/
Source: chromecache_117.3.dr	String found in binary or memory: https://dashboard.stripe.com/register
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/api
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/billing
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/changelog
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/connect
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/development
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/invoicing/hosted-invoice-page
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/libraries
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/no-code
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/no-code/payment-links
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/no-code/tap-to-pay
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/payments
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/payments/checkout
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/stripe-apps
Source: chromecache_117.3.dr	String found in binary or memory: https://docs.stripe.com/terminal
Source: chromecache_118.3.dr, chromecache_127.3.dr, chromecache_126.3.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_118.3.dr, chromecache_127.3.dr, chromecache_126.3.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=JetBrains
Source: chromecache_118.3.dr, chromecache_127.3.dr, chromecache_126.3.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:ital
Source: chromecache_118.3.dr, chromecache_127.3.dr, chromecache_126.3.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbV2o-flEEny0FZhsfKu5WU4xD0OwG_TA.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbV2o-flEEny0FZhsfKu5WU4xD1OwG_TA.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbV2o-flEEny0FZhsfKu5WU4xD2OwG_TA.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbV2o-flEEny0FZhsfKu5WU4xD4OwG_TA.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbV2o-flEEny0FZhsfKu5WU4xD_OwG_TA.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbX2o-flEEny0FZhsfKu5WU4xD-Cw2nSHrV.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbX2o-flEEny0FZhsfKu5WU4xD-Cw6nSHrV.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbX2o-flEEny0FZhsfKu5WU4xD-CwCnSHrV.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbX2o-flEEny0FZhsfKu5WU4xD-CwOnSA.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbX2o-flEEny0FZhsfKu5WU4xD-CwenSHrV.woff2)
Source: chromecache_136.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbX2o-flEEny0FZhsfKu5WU4xD-CwynSHrV.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLFj_Z1JlFc-K.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLm111VGdeOcEg.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLm21lVGdeOcEg.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLm81xVGdeOcEg.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLmg1hVGdeOcEg.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLmr19VF9eO.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLmr19VGdeOcEg.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiDyp8kv8JHgFVrJJLmy15VGdeOcEg.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiGyp8kv8JHgFVrJJLucHtA.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiGyp8kv8JHgFVrJJLufntAKPY.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiGyp8kv8JHgFVrLPTucHtA.woff2)
Source: chromecache_141.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiGyp8kv8JHgFVrLPTufntAKPY.woff2)
Source: chromecache_130.3.dr, chromecache_106.3.dr	String found in binary or memory: https://github.com/asg017/sqlite-vec/issues/new
Source: chromecache_115.3.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_115.3.dr	String found in binary or memory: https://github.com/gridstack/gridstack.js/tree/master/LICENSE
Source: chromecache_115.3.dr	String found in binary or memory: https://github.com/highlightjs/highlight.js/issues/2277
Source: chromecache_113.3.dr	String found in binary or memory: https://github.com/itfoundry/Poppins)&&&&s
Source: chromecache_135.3.dr	String found in binary or memory: https://github.com/rsms/inter)
Source: chromecache_117.3.dr	String found in binary or memory: https://github.com/stripe-samples
Source: chromecache_115.3.dr	String found in binary or memory: https://github.com/syntax-tree/hast-util-to-jsx-runtime
Source: chromecache_115.3.dr	String found in binary or memory: https://gridstackjs.com/
Source: chromecache_142.3.dr	String found in binary or memory: https://helpcenter.affirm.ca
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/1ctgMwd2p9euFW9pPSM7jR/451d5e987ca7fa14060526e6b1766a8b
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/1lCtk48IB26AGgXdHsrLrt/ad2816d6a744d5249c19ba66be22b0a6
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/3AGidihOJl4nH9D1vDjM84/9540155d584be52fc54c443b6efa4ae6
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/3CxKGHQwuus4zchiW7USrb/de51410aec1f616c97a88333dd090e6d
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/4jq1Wguyus7CA7yc2kxMgn/cf7b01aadf305daef40ac8acab654510
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/4zeFefnpB8yh7U3qSQRktP/d583ee93dd3d8910fa27296748699a0f
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5C5LvT3YZvRTGYn7uabXGj/7da8063dc77c67b7f66a1479f47409c8
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5DaqGgXeMbxSIqQj9WSqSF/8142c0c6e15b27a8bb6c8a0f8a5d4dfb
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5epSdhifMhjZWOkOxK9xG8/05715737a672f2069c17903d2acae585
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/6c56LuWUxcACbVkv4fqszI/d0a88e48d11a88b97daf896246ac40da
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7C4ROeiaqUa0HwwBU9EL9l/f9c57cccfc64de8869be7e7a9556fec9
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7jjWJlm9NHgLI7SV98B0Dg/ea1ae753f3764897fa4333311e41f496
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79
Source: chromecache_117.3.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/wEsTNDVgdEqaPAKkFdqnL/c69e1649432f1b772d86d81e423b7e3e/
Source: chromecache_120.3.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/controller-with-preconnect-0ece6434aefe121b16d94b1b177eebd
Source: chromecache_129.3.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Source: chromecache_120.3.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/shared-7f953df5e96a6d7356e06876c26d8c32.js
Source: chromecache_118.3.dr, chromecache_127.3.dr, chromecache_126.3.dr	String found in binary or memory: https://js.stripe.com/v3/pricing-table.js
Source: chromecache_115.3.dr	String found in binary or memory: https://kortex.co/download
Source: chromecache_115.3.dr	String found in binary or memory: https://lea.verou.me
Source: chromecache_115.3.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_115.3.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_140.3.dr	String found in binary or memory: https://m.stripe.network
Source: chromecache_117.3.dr	String found in binary or memory: https://marketplace.stripe.com
Source: chromecache_117.3.dr	String found in binary or memory: https://marketplace.stripe.com/
Source: chromecache_117.3.dr	String found in binary or memory: https://marketplace.stripe.com/collections/enterprise
Source: chromecache_115.3.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_115.3.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_115.3.dr	String found in binary or memory: https://opensource.org/licenses/MIT
Source: chromecache_117.3.dr	String found in binary or memory: https://press.stripe.com/
Source: chromecache_117.3.dr	String found in binary or memory: https://privacy.stripe.com/
Source: chromecache_117.3.dr	String found in binary or memory: https://q.stripe.com
Source: chromecache_115.3.dr	String found in binary or memory: https://rxdb.info/dev-mode.html?console=error
Source: chromecache_115.3.dr	String found in binary or memory: https://rxdb.info/errors.html?console=errors#
Source: chromecache_117.3.dr	String found in binary or memory: https://schema.org
Source: chromecache_113.3.dr	String found in binary or memory: https://scripts.sil.org/OFLThis
Source: chromecache_113.3.dr	String found in binary or memory: https://scripts.sil.org/OFLhttps://indiantypefoundry.comNinad
Source: chromecache_117.3.dr	String found in binary or memory: https://status.stripe.com/
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/#organization
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/ae
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/at
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/au
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/br
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/contact/sales
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/de
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/de-be
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/de-ch
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/de-li
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/de-lu
Source: chromecache_142.3.dr	String found in binary or memory: https://stripe.com/docs/testing.
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-at
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-be
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-bg
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-br
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-ca
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-ch
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-cy
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-cz
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-de
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-dk
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-ee
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-es
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-fi
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-fr
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-gi
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-gr
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-hk
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-hr
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-hu
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-it
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-jp
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-li
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-lt
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-lu
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-lv
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-mt
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-mx
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-my
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-nl
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-no
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-pl
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-pt
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-ro
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-se
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-sg
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-si
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-sk
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/en-th
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/es
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/es-us
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/fr
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/fr-be
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/fr-ca
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/fr-ch
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/fr-lu
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/gb
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/guides
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/ie
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/in
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/issuing
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/it
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/it-ch
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/it-hr
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/it-si
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/jp
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/mx
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/nl
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/nl-be
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/nz
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/pricing
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/privacy
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/pt-pt
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/radar
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/se
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/sigma
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/spc/licenses
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/sv-fi
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/th
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/us
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/use-cases/global-businesses
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/zh-hk
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/zh-my
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/zh-sg
Source: chromecache_117.3.dr	String found in binary or memory: https://stripe.com/zh-us
Source: chromecache_117.3.dr	String found in binary or memory: https://stripesessions.com/?utm_medium=owned-surfaces&utm_source=1a02&utm_campaign=US%2FCA_4e0a&utm_
Source: chromecache_117.3.dr	String found in binary or memory: https://support.stripe.com/?referrerLocale=en-us
Source: chromecache_143.3.dr	String found in binary or memory: https://t.firstpromoter.com/get_details
Source: chromecache_143.3.dr	String found in binary or memory: https://t.firstpromoter.com/tr
Source: chromecache_117.3.dr	String found in binary or memory: https://twitter.com/stripe
Source: chromecache_115.3.dr	String found in binary or memory: https://www.kortex.co/affiliates
Source: chromecache_115.3.dr	String found in binary or memory: https://www.kortex.co/privacy-policy
Source: chromecache_117.3.dr	String found in binary or memory: https://www.linkedin.com/company/stripe/
Source: chromecache_117.3.dr	String found in binary or memory: https://youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.6:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.89:443 -> 192.168.2.6:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.89:443 -> 192.168.2.6:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.176:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.47:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.237.129.68:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.237.129.68:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.89:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.176:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.200.27.109:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.89:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.89:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.89:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.89:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.176:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.31:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.192.176:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.187.159.182:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.187.159.182:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.186.23.98:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.238.51.98:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.149.209.136:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.162.8.126:443 -> 192.168.2.6:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.66.134:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.156:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.156:443 -> 192.168.2.6:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.187.159.182:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:49779 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir992_296329699

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir992_296329699

Jump to behavior

Source: classification engine

Classification label: mal76.phis.evad.win@27/68@41/19

Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE "%w"."%w_rowids"(rowid INTEGER PRIMARY KEY AUTOINCREMENT,id TEXT UNIQUE NOT NULL,chunk_id INTEGER,chunk_offset INTEGER);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE "%w"."%w_rowids"(rowid INTEGER PRIMARY KEY AUTOINCREMENT,id,chunk_id INTEGER,chunk_offset INTEGER);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: INSERT INTO "%w"."%w_rowids"(id)VALUES (?);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE "%w"."%w_metadatatext%02d"(rowid PRIMARY KEY, data TEXT);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: INSERT INTO "%w"."%w_chunks"(size, validity, rowids) VALUES (?, ?, ?);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE "%w"."%w_vector_chunks%02d"(rowid PRIMARY KEY,vectors BLOB NOT NULL);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE "%w"."%w_metadatachunks%02d"(rowid PRIMARY KEY, data BLOB NOT NULL);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE "%w"."%w_chunks"(chunk_id INTEGER PRIMARY KEY AUTOINCREMENT,size INTEGER NOT NULL,validity BLOB NOT NULL,rowids BLOB NOT NULL);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: INSERT INTO "%w"."%w_rowids"(rowid)VALUES (?);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,nexec INT,ncycle INT,stmt HIDDEN);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: chromecache_130.3.dr, chromecache_106.3.dr	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2080,i,14676163167617895315,2956650700509316873,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2080,i,14676163167617895315,2956650700509316873,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match

File source: 1.26.d.script.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://auth.kortex.co/realms/kortex/protocol/openid-connect/3p-cookies/step1.html	0%	Avira URL Cloud	safe
https://lea.verou.me	0%	Avira URL Cloud	safe
https://app.kortex.co/api/documents/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd/ydoc/	0%	Avira URL Cloud	safe
https://app.kortex.co/assets/index-C2qvVito.css	0%	Avira URL Cloud	safe
https://kortex.co/download	0%	Avira URL Cloud	safe
https://app.kortex.co/assets/icons/image.png	0%	Avira URL Cloud	safe
https://app.kortex.co/assets/sqlite3Worker-DnFqcIer.js	0%	Avira URL Cloud	safe
https://gridstackjs.com/	0%	Avira URL Cloud	safe
https://rxdb.info/dev-mode.html?console=error	0%	Avira URL Cloud	safe
https://www.kortex.co/affiliates	0%	Avira URL Cloud	safe
https://app.kortex.co/api/documents/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
browser-intake-us5-datadoghq.com	34.149.66.134	true	false	high
collab-1.kortex.co	100.24.27.53	true	false	unknown
ow.aleonanob.ru	104.21.48.156	true	true	unknown
app.kortex.co	18.173.219.89	true	false	unknown
stripecdn.map.fastly.net	151.101.0.176	true	false	high
r.stripe.com	54.187.159.182	true	false	high
code.jquery.com	151.101.2.137	true	false	high
m.stripe.com	44.238.51.98	true	false	high
dexeqbeb7giwr.cloudfront.net	18.238.49.31	true	false	high
stripe.com	54.162.8.126	true	false	high
www.google.com	142.251.40.228	true	false	high
auth.kortex.co	34.237.129.68	true	false	unknown
api.stripe.com	34.200.27.109	true	false	high
d2ycxbs0cq3yaz.cloudfront.net	108.138.106.47	true	false	unknown
m.stripe.network	unknown	unknown	false	high
cdn.firstpromoter.com	unknown	unknown	false	high
_8123._https.collab-1.kortex.co	unknown	unknown	false	unknown
js.stripe.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js	false		high
https://auth.kortex.co/realms/kortex/protocol/openid-connect/3p-cookies/step1.html	false	Avira URL Cloud: safe	unknown
https://browser-intake-us5-datadoghq.com/api/v2/logs?ddsource=browser&ddtags=sdk_version%3A5.35.1%2Capi%3Abeacon%2Cenv%3Aprod%2Cservice%3Akortex-frontend%2Cversion%3A0.27.0&dd-api-key=pubd0ecd4e4dda22abfc51b0f286f8d44da&dd-evp-origin-version=5.35.1&dd-evp-origin=browser&dd-request-id=ab53e062-e5d3-4225-9447-9d7c1dfc610f	false		high
https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	false		unknown
https://app.kortex.co/assets/sqlite3Worker-DnFqcIer.js	false	Avira URL Cloud: safe	unknown
https://js.stripe.com/v3/pricing-table.js	false		high
https://ow.aleonanob.ru/CqUns/	true		unknown
https://app.kortex.co/api/documents/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd/ydoc/	false	Avira URL Cloud: safe	unknown
https://app.kortex.co/assets/index-C2qvVito.css	false	Avira URL Cloud: safe	unknown
https://app.kortex.co/assets/icons/image.png	false	Avira URL Cloud: safe	unknown
https://app.kortex.co/api/documents/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	false	Avira URL Cloud: safe	unknown
https://stripe.com/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://rxdb.info/dev-mode.html?console=error	chromecache_115.3.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/spc/licenses	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-Frontdoor-4513faa7ba2dd8949ee2.css	chromecache_117.3.dr	false		high
https://twitter.com/stripe	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-CopyTitle-c641e014b3946628bc95.css	chromecache_117.3.dr	false		high
https://docs.stripe.com	chromecache_117.3.dr	false		high
https://stripe.com/de-ch	chromecache_117.3.dr	false		high
https://stripe.com/en-li	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-GridLayout-decb2efdf862023c83af.css	chromecache_117.3.dr	false		high
https://press.stripe.com/	chromecache_117.3.dr	false		high
https://stripe.com/en-lu	chromecache_117.3.dr	false		high
https://stripe.com/en-lt	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnectGraphic-30f9ea68cfc29ae65dd5.css	chromecache_117.3.dr	false		high
https://stripe.com/en-lv	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-StripeProductUsedList-9d35065b7106fd9143c1.css	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-Flag-72c7e1f44c2c1c38f9e0.css	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorGraphic-ab42746a2bb65d850037.css	chromecache_117.3.dr	false		high
https://api.stripe.com	chromecache_120.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditorLineNumbers-0eded1c84476ec649145.css	chromecache_117.3.dr	false		high
https://stripe.com/en-my	chromecache_117.3.dr	false		high
https://www.kortex.co/affiliates	chromecache_115.3.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/docs/testing.	chromecache_142.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-InvoicingFeatureGraphic-db95f6cbfa638cca151e.css	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-ProductListing-3e17d7acee941b127dd1.css	chromecache_117.3.dr	false		high
https://t.firstpromoter.com/get_details	chromecache_143.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-CustomersCaseStudyCardOverlay-09e527d11b6471566771	chromecache_117.3.dr	false		high
https://stripe.com/ie	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorIconOutline-2c0929473dcd28db2e99.css	chromecache_117.3.dr	false		high
https://m.stripe.network	chromecache_140.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnectFlowDiagramOrderNotification-12b17	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.c	chromecache_117.3.dr	false		high
https://docs.stripe.com/stripe-apps	chromecache_117.3.dr	false		high
https://openjsf.org/	chromecache_115.3.dr	false		high
https://stripe.com/en-mx	chromecache_117.3.dr	false		high
https://youtube.com/	chromecache_117.3.dr	false		high
https://stripe.com/en-mt	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-CardField-b5eed93d40ea8f24d704.css	chromecache_117.3.dr	false		high
https://stripe.com/pricing	chromecache_117.3.dr	false		high
https://stripe.com/en-no	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1/f965fdf4.woff2)	chromecache_117.3.dr	false		high
https://docs.stripe.com/development	chromecache_117.3.dr	false		high
https://docs.stripe.com/no-code/payment-links	chromecache_117.3.dr	false		high
https://stripe.com/in	chromecache_117.3.dr	false		high
https://schema.org	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditorAsciiLoader-c1a350cb85f7a989f599.css	chromecache_117.3.dr	false		high
https://stripe.com/en-nl	chromecache_117.3.dr	false		high
https://docs.stripe.com/no-code	chromecache_117.3.dr	false		high
https://docs.stripe.com/	chromecache_117.3.dr	false		high
https://stripe.com/it	chromecache_117.3.dr	false		high
https://kortex.co/download	chromecache_115.3.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_115.3.dr	false		high
https://docs.stripe.com/changelog	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-StripeSet-423109ad4bf57a2a011c.css	chromecache_117.3.dr	false		high
https://stripe.com/guides	chromecache_117.3.dr	false		high
https://gridstackjs.com/	chromecache_115.3.dr	false	Avira URL Cloud: safe	unknown
https://OW.aleonanob.ru/CqUns/	chromecache_137.3.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnection-192c60d5ff4ac27dec4f.css	chromecache_117.3.dr	false		high
https://stripe.com/#organization	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-AnimatedCodeEditor-86776e0635434fc49715.css	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1/f965fdf4.woff2	chromecache_117.3.dr	false		high
https://t.firstpromoter.com/tr	chromecache_143.3.dr	false		high
https://images.stripeassets.com/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0	chromecache_117.3.dr	false		high
https://stripe.com/jp	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorStandaloneAnimation-5aefb3912ae346b5293e.	chromecache_117.3.dr	false		high
https://lea.verou.me	chromecache_115.3.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/v1-CodeEditorAutocomplete-dc62d89d9e2121e48baf.css	chromecache_117.3.dr	false		high
https://dashboard.stripe.com/	chromecache_117.3.dr	false		high
https://docs.stripe.com/no-code/tap-to-pay	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorConnectAnimation-f4ce77b995975fa55335.css	chromecache_117.3.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_115.3.dr	false		high
https://stripe.com/en-hu	chromecache_117.3.dr	false		high
https://stripe.com/th	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f66	chromecache_117.3.dr	false		high
https://opensource.org/licenses/MIT	chromecache_115.3.dr	false		high
https://stripe.com/sv-fi	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorIconGrid-f5ddeb3e7d94044a9646.css	chromecache_117.3.dr	false		high
https://stripe.com/en-hk	chromecache_117.3.dr	false		high
https://support.stripe.com/?referrerLocale=en-us	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-Form-401d42df82b6e8482f06.css	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-Global-f1eeffae1de3242fcca9.css	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-GradientLegend-f1cabc70fbf82f3e9c05.css	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorIssuingAnimation-ba03e22ccfea12d68c6c.css	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-GlobalizationPicker-cb59e0de1d5c3aeaa184.css	chromecache_117.3.dr	false		high
https://stripe.com/en-hr	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorSubanimation-b9163916332f2a67d464.css	chromecache_117.3.dr	false		high
https://stripe.com/it-hr	chromecache_117.3.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/v1-FrontdoorPaymentsAnimation-71bdbfda51a40294b593.cs	chromecache_117.3.dr	false		high
https://images.stripeassets.com/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074	chromecache_117.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.200.27.109	api.stripe.com	United States	14618	AMAZON-AESUS	false
151.101.0.176	stripecdn.map.fastly.net	United States	54113	FASTLYUS	false
34.237.129.68	auth.kortex.co	United States	14618	AMAZON-AESUS	false
54.162.8.126	stripe.com	United States	14618	AMAZON-AESUS	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
18.238.49.31	dexeqbeb7giwr.cloudfront.net	United States	16509	AMAZON-02US	false
100.24.27.53	collab-1.kortex.co	United States	14618	AMAZON-AESUS	false
18.173.219.89	app.kortex.co	United States	3	MIT-GATEWAYSUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
108.138.106.47	d2ycxbs0cq3yaz.cloudfront.net	United States	16509	AMAZON-02US	false
54.187.159.182	r.stripe.com	United States	16509	AMAZON-02US	false
54.149.209.136	unknown	United States	16509	AMAZON-02US	false
54.186.23.98	unknown	United States	16509	AMAZON-02US	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.48.156	ow.aleonanob.ru	United States	13335	CLOUDFLARENETUS	true
34.149.66.134	browser-intake-us5-datadoghq.com	United States	2686	ATGS-MMD-ASUS	false
151.101.192.176	unknown	United States	54113	FASTLYUS	false
44.238.51.98	m.stripe.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648160
Start date and time:	2025-03-25 15:55:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.evad.win@27/68@41/19

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.78, 142.250.80.67, 142.250.80.14, 172.253.62.84, 142.250.80.78, 142.250.65.174, 142.250.80.110, 142.251.40.170, 142.250.65.227, 199.232.210.172, 142.250.80.46, 142.251.35.170, 142.251.40.234, 142.250.65.202, 142.251.40.202, 142.250.80.10, 142.251.41.10, 142.251.40.106, 142.250.64.106, 142.250.65.170, 172.217.165.138, 142.251.32.106, 142.250.72.106, 142.250.81.234, 142.251.40.138, 142.250.65.234, 142.251.40.174, 142.251.40.206, 142.251.40.227, 142.250.65.206, 142.250.80.3, 184.31.69.3, 172.202.163.200
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebAssembly (wasm) binary module version 0x1 (MVP)
Category:	downloaded
Size (bytes):	3588423
Entropy (8bit):	5.905383569719311
Encrypted:	false
SSDEEP:	24576:CAYkW+jMuxVGAAg8N/u/At2uknjV1ChHNcIdRpPcRvGRQNiheVVWlPVs/L9hk8sx:C0WSS0RjL4PoSoz0d2HMIFk
MD5:	BD86DA2C9702ED46E93406D97A62096A
SHA1:	6EB58B10C6C365BCB20DF763E0AB166C092A3E3C
SHA-256:	8DF46245C0C6CFD779C93EE1869CCEFD9C40551056C77CE258BB9AF4D03E8104
SHA-512:	9F08F06A69FBF1671B0E35D13481185A49939699FF1043EFDE89F02657698196AE900ED02B02BA97EAD8F4D1CEFB04B68B2C6DF9C1301024EB95F9D79CA99F13
Malicious:	false
Reputation:	low
URL:	https://app.kortex.co/assets/lib/sqlite3.wasm
Preview:	.asm.......x`....`...`.....`.....`......`...`.......`....`....~..`..~..`........`.....~.`......~~.`..`......~..`......`.........`.\|.\|`.\|\|.\|`.......`.~..`..~...`..~~..`..~..~`..\|......`..\|`..~....`.~..`.....~....`..~...`...~`.~.~`..~`...\|`..\|...`..\|\|.`...~..`....~`..........`....~~...`.\|.~`...~....`...~..`..\|.`.\|..`..~.`...~...`....\|`....~....`...\|..`..\|...`......~...`...........`..............`............`.............`...~.~`..~.....`........`.....~...`.~...`....~.....`.~\|..`.\|~..`....~.`.........`.............`..........`............`...........`...............`..~.~`......~.~`..~~.......`...~~~.....`......~`.~.....`...~.`..~~~...`...~...`....~~.....`..~.~~~~....`.....~...~`..~......`..~.....`.....~`....~~.`..~~.`..~........`..~.......`.~......~`..~....`...~~.`...}`......\|`..~~~..`...~...~..~..`......~......`...........~.....`.....}`..~~~.....`...~~~....`...~~~..`..~~....`.\|...`.\|\|..\|`..\|.\|`.\|~~.\|`.\|.`.~..\|`.\|..\|`..~~~~.`..~~..`.~~..`....~.~`.~....`.~~~~..`..}.`.~~.~`.~~.\|...$.env.m

Source: Yara match	File source: 1.25.d.script.csv, type: HTML
Source: Yara match	File source: 1.8.pages.csv, type: HTML
Source: Yara match	File source: 1.7.pages.csv, type: HTML

Source: 1.27..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ow.aleonanob.ru/CqUns/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be attempting to redirect the user to a suspicious domain and collect sensitive information, which is a clear indication of malicious intent. The overall behavior of this script is highly suspicious and poses a significant security risk.
Source: 1.29..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ow.aleonanob.ru/CqUns/... This script demonstrates high-risk behaviors, including dynamic code execution through the use of a Proxy object that evaluates decoded strings. The obfuscated nature of the code and the potential for remote code execution make this a high-risk script.

Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-preconnect-f404747711a7c2c7dedf67dbfab1cb30.html#__shared_params__[version]=v3&apiKey=pk_live_51NXZqtIalbdgQNkI8TZQgZxfwoIYePHRxFyBkvFS2tDPaGZv4qPQ6jRVbbNthGFx657mVaJ4xGEQ4LFdrW99y8Ic00p41D1EYX&stripeJsId=f72ab03f-cc81-4769-9c7b-e8fa2f9f38dd&firstStripeInstanceCreatedLatency=23&controllerCount=1&isCheckout=false&stripeJsLoadTime=1742914616156&manualBrowserDeprecationRollout=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fapp.kortex.co%2Fpublic%2Fdocument%2F8838161b-5f2e-4b7c-b66b-ddfd9db20ecd&controllerId=__privateStripeController6701
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-preconnect-f404747711a7c2c7dedf67dbfab1cb30.html#__shared_params__[version]=v3&apiKey=pk_live_51NXZqtIalbdgQNkI8TZQgZxfwoIYePHRxFyBkvFS2tDPaGZv4qPQ6jRVbbNthGFx657mVaJ4xGEQ4LFdrW99y8Ic00p41D1EYX&stripeJsId=f72ab03f-cc81-4769-9c7b-e8fa2f9f38dd&firstStripeInstanceCreatedLatency=23&controllerCount=1&isCheckout=false&stripeJsLoadTime=1742914616156&manualBrowserDeprecationRollout=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fapp.kortex.co%2Fpublic%2Fdocument%2F8838161b-5f2e-4b7c-b66b-ddfd9db20ecd&controllerId=__privateStripeController6701
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.kortex.co%2Fpublic%2Fdocument%2F8838161b-5f2e-4b7c-b66b-ddfd9db20ecd&title=Kortex&referrer=&muid=NA&sid=NA&version=6&preview=false&__shared_params__[version]=v3
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-preconnect-f404747711a7c2c7dedf67dbfab1cb30.html#__shared_params__[version]=v3&apiKey=pk_live_51NXZqtIalbdgQNkI8TZQgZxfwoIYePHRxFyBkvFS2tDPaGZv4qPQ6jRVbbNthGFx657mVaJ4xGEQ4LFdrW99y8Ic00p41D1EYX&stripeJsId=f72ab03f-cc81-4769-9c7b-e8fa2f9f38dd&firstStripeInstanceCreatedLatency=23&controllerCount=1&isCheckout=false&stripeJsLoadTime=1742914616156&manualBrowserDeprecationRollout=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fapp.kortex.co%2Fpublic%2Fdocument%2F8838161b-5f2e-4b7c-b66b-ddfd9db20ecd&controllerId=__privateStripeController6701
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.kortex.co%2Fpublic%2Fdocument%2F8838161b-5f2e-4b7c-b66b-ddfd9db20ecd&title=Kortex&referrer=&muid=NA&sid=NA&version=6&preview=false&__shared_params__[version]=v3

Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No favicon
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No favicon
Source: https://ow.aleonanob.ru/CqUns/	HTTP Parser: No favicon
Source: https://ow.aleonanob.ru/CqUns/	HTTP Parser: No favicon

Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No <meta name="author".. found
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No <meta name="author".. found
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No <meta name="author".. found
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No <meta name="author".. found

Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No <meta name="copyright".. found
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No <meta name="copyright".. found
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No <meta name="copyright".. found
Source: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.161.105
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.161.105
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.161.105
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_117.3.dr	String found in binary or memory: "https://www.facebook.com/StripeHQ", equals www.facebook.com (Facebook)
Source: chromecache_117.3.dr	String found in binary or memory: "https://www.linkedin.com/company/stripe/", equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: app.kortex.co
Source: global traffic	DNS traffic detected: DNS query: js.stripe.com
Source: global traffic	DNS traffic detected: DNS query: cdn.firstpromoter.com
Source: global traffic	DNS traffic detected: DNS query: auth.kortex.co
Source: global traffic	DNS traffic detected: DNS query: collab-1.kortex.co
Source: global traffic	DNS traffic detected: DNS query: _8123._https.collab-1.kortex.co
Source: global traffic	DNS traffic detected: DNS query: api.stripe.com
Source: global traffic	DNS traffic detected: DNS query: r.stripe.com
Source: global traffic	DNS traffic detected: DNS query: m.stripe.network
Source: global traffic	DNS traffic detected: DNS query: m.stripe.com
Source: global traffic	DNS traffic detected: DNS query: stripe.com
Source: global traffic	DNS traffic detected: DNS query: ow.aleonanob.ru
Source: global traffic	DNS traffic detected: DNS query: browser-intake-us5-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 25, 2025 15:56:48.281438112 CET	192.168.2.6	1.1.1.1	0xd7e2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:48.281629086 CET	192.168.2.6	1.1.1.1	0x54a6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 25, 2025 15:56:50.411624908 CET	192.168.2.6	1.1.1.1	0xbb8f	Standard query (0)	app.kortex.co	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:50.412326097 CET	192.168.2.6	1.1.1.1	0x727a	Standard query (0)	app.kortex.co	65	IN (0x0001)	false
Mar 25, 2025 15:56:51.632664919 CET	192.168.2.6	1.1.1.1	0xaa9d	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.633022070 CET	192.168.2.6	1.1.1.1	0xbc85	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:56:51.633958101 CET	192.168.2.6	1.1.1.1	0xa020	Standard query (0)	cdn.firstpromoter.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.634321928 CET	192.168.2.6	1.1.1.1	0x7adf	Standard query (0)	cdn.firstpromoter.com	65	IN (0x0001)	false
Mar 25, 2025 15:56:53.940011978 CET	192.168.2.6	1.1.1.1	0xfd74	Standard query (0)	auth.kortex.co	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:53.940352917 CET	192.168.2.6	1.1.1.1	0xf6cb	Standard query (0)	auth.kortex.co	65	IN (0x0001)	false
Mar 25, 2025 15:56:57.625125885 CET	192.168.2.6	1.1.1.1	0x8266	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:57.626773119 CET	192.168.2.6	1.1.1.1	0x5573	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:56:58.458530903 CET	192.168.2.6	1.1.1.1	0x2092	Standard query (0)	collab-1.kortex.co	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:58.458621979 CET	192.168.2.6	1.1.1.1	0x6204	Standard query (0)	_8123._https.collab-1.kortex.co	65	IN (0x0001)	false
Mar 25, 2025 15:56:58.693731070 CET	192.168.2.6	1.1.1.1	0x254b	Standard query (0)	api.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:58.696382999 CET	192.168.2.6	1.1.1.1	0x72f6	Standard query (0)	api.stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:56:59.145231009 CET	192.168.2.6	1.1.1.1	0x3541	Standard query (0)	app.kortex.co	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:59.145704031 CET	192.168.2.6	1.1.1.1	0xc531	Standard query (0)	app.kortex.co	65	IN (0x0001)	false
Mar 25, 2025 15:57:01.534435987 CET	192.168.2.6	1.1.1.1	0x6f5e	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:01.534621000 CET	192.168.2.6	1.1.1.1	0x18b6	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:57:02.989753008 CET	192.168.2.6	1.1.1.1	0x65dd	Standard query (0)	r.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:02.992655039 CET	192.168.2.6	1.1.1.1	0xde0f	Standard query (0)	r.stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:57:03.261189938 CET	192.168.2.6	1.1.1.1	0xaaff	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:03.261444092 CET	192.168.2.6	1.1.1.1	0x7a65	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Mar 25, 2025 15:57:04.006870985 CET	192.168.2.6	1.1.1.1	0x94f7	Standard query (0)	r.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:04.007046938 CET	192.168.2.6	1.1.1.1	0x8631	Standard query (0)	r.stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:57:05.030996084 CET	192.168.2.6	1.1.1.1	0xafdd	Standard query (0)	r.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.193094969 CET	192.168.2.6	1.1.1.1	0xac4d	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.193310976 CET	192.168.2.6	1.1.1.1	0x427b	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:57:06.369329929 CET	192.168.2.6	1.1.1.1	0x9a0c	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.370039940 CET	192.168.2.6	1.1.1.1	0xc98e	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:57:07.168688059 CET	192.168.2.6	1.1.1.1	0x7f1	Standard query (0)	stripe.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:07.168833017 CET	192.168.2.6	1.1.1.1	0xc3a4	Standard query (0)	stripe.com	65	IN (0x0001)	false
Mar 25, 2025 15:57:09.527266026 CET	192.168.2.6	1.1.1.1	0x4f2d	Standard query (0)	ow.aleonanob.ru	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:09.527659893 CET	192.168.2.6	1.1.1.1	0xf929	Standard query (0)	ow.aleonanob.ru	65	IN (0x0001)	false
Mar 25, 2025 15:57:09.561944962 CET	192.168.2.6	1.1.1.1	0xdd4	Standard query (0)	browser-intake-us5-datadoghq.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:09.562164068 CET	192.168.2.6	1.1.1.1	0x82c6	Standard query (0)	browser-intake-us5-datadoghq.com	65	IN (0x0001)	false
Mar 25, 2025 15:57:11.536139011 CET	192.168.2.6	1.1.1.1	0x5974	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:11.536298037 CET	192.168.2.6	1.1.1.1	0xa9b7	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 25, 2025 15:57:55.423429012 CET	192.168.2.6	1.1.1.1	0xb166	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:55.423655033 CET	192.168.2.6	1.1.1.1	0xf9f4	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 25, 2025 15:56:48.389312029 CET	1.1.1.1	192.168.2.6	0xd7e2	No error (0)	www.google.com		142.251.40.228	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:48.389348030 CET	1.1.1.1	192.168.2.6	0x54a6	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 25, 2025 15:56:50.548281908 CET	1.1.1.1	192.168.2.6	0xbb8f	No error (0)	app.kortex.co		18.173.219.89	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:50.548281908 CET	1.1.1.1	192.168.2.6	0xbb8f	No error (0)	app.kortex.co		18.173.219.55	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:50.548281908 CET	1.1.1.1	192.168.2.6	0xbb8f	No error (0)	app.kortex.co		18.173.219.127	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:50.548281908 CET	1.1.1.1	192.168.2.6	0xbb8f	No error (0)	app.kortex.co		18.173.219.52	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.737890959 CET	1.1.1.1	192.168.2.6	0xbc85	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:56:51.738981962 CET	1.1.1.1	192.168.2.6	0xaa9d	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:56:51.738981962 CET	1.1.1.1	192.168.2.6	0xaa9d	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.738981962 CET	1.1.1.1	192.168.2.6	0xaa9d	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.738981962 CET	1.1.1.1	192.168.2.6	0xaa9d	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.738981962 CET	1.1.1.1	192.168.2.6	0xaa9d	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.739111900 CET	1.1.1.1	192.168.2.6	0xa020	No error (0)	cdn.firstpromoter.com	d2ycxbs0cq3yaz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:56:51.739111900 CET	1.1.1.1	192.168.2.6	0xa020	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		108.138.106.47	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.739111900 CET	1.1.1.1	192.168.2.6	0xa020	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		108.138.106.121	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.739111900 CET	1.1.1.1	192.168.2.6	0xa020	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		108.138.106.13	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.739111900 CET	1.1.1.1	192.168.2.6	0xa020	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		108.138.106.60	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:51.741892099 CET	1.1.1.1	192.168.2.6	0x7adf	No error (0)	cdn.firstpromoter.com	d2ycxbs0cq3yaz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:56:54.073997021 CET	1.1.1.1	192.168.2.6	0xfd74	No error (0)	auth.kortex.co		34.237.129.68	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:54.073997021 CET	1.1.1.1	192.168.2.6	0xfd74	No error (0)	auth.kortex.co		44.205.65.226	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:57.736448050 CET	1.1.1.1	192.168.2.6	0x5573	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:56:57.754568100 CET	1.1.1.1	192.168.2.6	0x8266	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:56:57.754568100 CET	1.1.1.1	192.168.2.6	0x8266	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:57.754568100 CET	1.1.1.1	192.168.2.6	0x8266	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:57.754568100 CET	1.1.1.1	192.168.2.6	0x8266	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:57.754568100 CET	1.1.1.1	192.168.2.6	0x8266	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:58.566291094 CET	1.1.1.1	192.168.2.6	0x2092	No error (0)	collab-1.kortex.co		100.24.27.53	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:58.596031904 CET	1.1.1.1	192.168.2.6	0x6204	Name error (3)	_8123._https.collab-1.kortex.co	none	none	65	IN (0x0001)	false
Mar 25, 2025 15:56:58.802344084 CET	1.1.1.1	192.168.2.6	0x254b	No error (0)	api.stripe.com		34.200.27.109	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:58.802344084 CET	1.1.1.1	192.168.2.6	0x254b	No error (0)	api.stripe.com		34.202.153.183	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:58.802344084 CET	1.1.1.1	192.168.2.6	0x254b	No error (0)	api.stripe.com		34.200.47.89	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:59.258158922 CET	1.1.1.1	192.168.2.6	0x3541	No error (0)	app.kortex.co		18.173.219.89	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:59.258158922 CET	1.1.1.1	192.168.2.6	0x3541	No error (0)	app.kortex.co		18.173.219.127	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:59.258158922 CET	1.1.1.1	192.168.2.6	0x3541	No error (0)	app.kortex.co		18.173.219.55	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:56:59.258158922 CET	1.1.1.1	192.168.2.6	0x3541	No error (0)	app.kortex.co		18.173.219.52	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:01.640229940 CET	1.1.1.1	192.168.2.6	0x6f5e	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:57:01.640229940 CET	1.1.1.1	192.168.2.6	0x6f5e	No error (0)	dexeqbeb7giwr.cloudfront.net		18.238.49.31	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:01.640229940 CET	1.1.1.1	192.168.2.6	0x6f5e	No error (0)	dexeqbeb7giwr.cloudfront.net		18.238.49.4	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:01.640229940 CET	1.1.1.1	192.168.2.6	0x6f5e	No error (0)	dexeqbeb7giwr.cloudfront.net		18.238.49.79	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:01.640229940 CET	1.1.1.1	192.168.2.6	0x6f5e	No error (0)	dexeqbeb7giwr.cloudfront.net		18.238.49.18	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:01.643460035 CET	1.1.1.1	192.168.2.6	0x18b6	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:57:03.095967054 CET	1.1.1.1	192.168.2.6	0x65dd	No error (0)	r.stripe.com		54.187.159.182	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:03.095967054 CET	1.1.1.1	192.168.2.6	0x65dd	No error (0)	r.stripe.com		54.186.23.98	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:03.095967054 CET	1.1.1.1	192.168.2.6	0x65dd	No error (0)	r.stripe.com		54.187.119.242	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:03.375253916 CET	1.1.1.1	192.168.2.6	0xaaff	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:57:03.375253916 CET	1.1.1.1	192.168.2.6	0xaaff	No error (0)	prod-m-tree.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:57:03.375253916 CET	1.1.1.1	192.168.2.6	0xaaff	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:03.375253916 CET	1.1.1.1	192.168.2.6	0xaaff	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:03.375253916 CET	1.1.1.1	192.168.2.6	0xaaff	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:03.375253916 CET	1.1.1.1	192.168.2.6	0xaaff	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:03.375277042 CET	1.1.1.1	192.168.2.6	0x7a65	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:57:03.375277042 CET	1.1.1.1	192.168.2.6	0x7a65	No error (0)	prod-m-tree.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 15:57:05.137257099 CET	1.1.1.1	192.168.2.6	0xafdd	No error (0)	r.stripe.com		54.186.23.98	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.137257099 CET	1.1.1.1	192.168.2.6	0xafdd	No error (0)	r.stripe.com		54.187.159.182	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.137257099 CET	1.1.1.1	192.168.2.6	0xafdd	No error (0)	r.stripe.com		54.187.119.242	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.298420906 CET	1.1.1.1	192.168.2.6	0xac4d	No error (0)	m.stripe.com		44.238.51.98	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.298420906 CET	1.1.1.1	192.168.2.6	0xac4d	No error (0)	m.stripe.com		35.160.79.12	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.298420906 CET	1.1.1.1	192.168.2.6	0xac4d	No error (0)	m.stripe.com		34.223.29.112	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.298420906 CET	1.1.1.1	192.168.2.6	0xac4d	No error (0)	m.stripe.com		44.241.138.155	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.298420906 CET	1.1.1.1	192.168.2.6	0xac4d	No error (0)	m.stripe.com		54.203.153.105	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.298420906 CET	1.1.1.1	192.168.2.6	0xac4d	No error (0)	m.stripe.com		54.213.123.108	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.298420906 CET	1.1.1.1	192.168.2.6	0xac4d	No error (0)	m.stripe.com		54.149.209.136	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:05.298420906 CET	1.1.1.1	192.168.2.6	0xac4d	No error (0)	m.stripe.com		44.242.25.221	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.481909037 CET	1.1.1.1	192.168.2.6	0x9a0c	No error (0)	m.stripe.com		54.149.209.136	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.481909037 CET	1.1.1.1	192.168.2.6	0x9a0c	No error (0)	m.stripe.com		34.223.29.112	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.481909037 CET	1.1.1.1	192.168.2.6	0x9a0c	No error (0)	m.stripe.com		44.241.138.155	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.481909037 CET	1.1.1.1	192.168.2.6	0x9a0c	No error (0)	m.stripe.com		44.238.51.98	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.481909037 CET	1.1.1.1	192.168.2.6	0x9a0c	No error (0)	m.stripe.com		52.11.248.90	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.481909037 CET	1.1.1.1	192.168.2.6	0x9a0c	No error (0)	m.stripe.com		54.203.153.105	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.481909037 CET	1.1.1.1	192.168.2.6	0x9a0c	No error (0)	m.stripe.com		44.242.25.221	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:06.481909037 CET	1.1.1.1	192.168.2.6	0x9a0c	No error (0)	m.stripe.com		54.213.123.108	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:07.275087118 CET	1.1.1.1	192.168.2.6	0x7f1	No error (0)	stripe.com		54.162.8.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:07.275087118 CET	1.1.1.1	192.168.2.6	0x7f1	No error (0)	stripe.com		3.90.98.12	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:07.275087118 CET	1.1.1.1	192.168.2.6	0x7f1	No error (0)	stripe.com		3.229.145.172	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:09.708381891 CET	1.1.1.1	192.168.2.6	0xdd4	No error (0)	browser-intake-us5-datadoghq.com		34.149.66.134	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:09.878501892 CET	1.1.1.1	192.168.2.6	0x4f2d	No error (0)	ow.aleonanob.ru		104.21.48.156	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:09.878501892 CET	1.1.1.1	192.168.2.6	0x4f2d	No error (0)	ow.aleonanob.ru		172.67.154.67	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:09.884314060 CET	1.1.1.1	192.168.2.6	0xf929	No error (0)	ow.aleonanob.ru			65	IN (0x0001)	false
Mar 25, 2025 15:57:11.641771078 CET	1.1.1.1	192.168.2.6	0x5974	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:11.641771078 CET	1.1.1.1	192.168.2.6	0x5974	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:11.641771078 CET	1.1.1.1	192.168.2.6	0x5974	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:11.641771078 CET	1.1.1.1	192.168.2.6	0x5974	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 25, 2025 15:57:55.529073000 CET	1.1.1.1	192.168.2.6	0xb166	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:50 UTC	715	OUT	GET /public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd HTTP/1.1 Host: app.kortex.co Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:50 UTC	736	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2125 Connection: close Vary: Accept-Encoding Date: Tue, 25 Mar 2025 14:56:50 GMT Server: nginx Accept-Ranges: bytes Etag: "sthrmn1n1" Last-Modified: Fri, 21 Mar 2025 20:59:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 X-Cache: Miss from cloudfront Via: 1.1 86f58a7ba760944d1efd0f2fe2242e1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: iy1-Tu-6wBcWT_O_4gkHDyFjXV_rnztrRa6djXDVVjX3m6xaWvmESQ==
2025-03-25 14:56:50 UTC	2125	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 0a 09 09 09 72 65 6c 3d 22 69 63 6f 6e 22 0a 09 09 09 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 0a 09 09 09 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 0a 09 09 2f 3e 0a 09 09 3c 6c 69 6e 6b 0a 09 09 09 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 0a 09 09 09 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 0a 09 09 2f 3e 0a 09 09 3c 6c 69 6e 6b 0a 09 09 09 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 0a 09 09 09 68 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8" /><linkrel="icon"type="image/png"href="/assets/icons/favicon.png"/><linkrel="preconnect"href="https://fonts.googleapis.com"/><linkrel="preconnect"h

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:50 UTC	622	OUT	GET /assets/index-CMVtrWuM.js HTTP/1.1 Host: app.kortex.co Connection: keep-alive Origin: https://app.kortex.co sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:51 UTC	725	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 12863548 Connection: close Date: Tue, 25 Mar 2025 14:56:51 GMT Server: nginx Accept-Ranges: bytes Last-Modified: Fri, 21 Mar 2025 20:59:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 ETag: "sthrmn7npks" X-Cache: Miss from cloudfront Via: 1.1 5773f2f43b989a9f02f459e75620d5f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: YkQZVGf4Ae5rPALAt8vwNgjDEZxeWwjZa8EP8WBcLYHyoO71Gez5ZA==
2025-03-25 14:56:51 UTC	2363	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4f 78 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 6e 5d 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 73 74 72 69 6e 67 22 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 7b 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 72 29 69 66 28 69 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 21 28 69 20 69 6e 20 65 29 29 7b 63 6f 6e 73 74 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 69 29 3b 6f 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 6f 2e 67 65 74 3f 6f 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 28 29 3d 3e 72 5b 69 5d Data Ascii: function Ox(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const i in r)if(i!=="default"&&!(i in e)){const o=Object.getOwnPropertyDescriptor(r,i);o&&Object.defineProperty(e,i,o.get?o:{enumerable:!0,get:()=>r[i]
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 29 2c 76 67 74 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 54 4b 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 65 21 3d 22 6f 62 6a 65 63 74 22 3f 6e 75 6c 6c 3a 28 65 3d 76 67 74 26 26 65 5b 76 67 74 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3a 6e 75 6c 6c 29 7d 76 61 72 20 6e 4a 74 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 52 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 53 65 74 Data Ascii: ),vgt=Symbol.iterator;function TKn(e){return e===null\|\|typeof e!="object"?null:(e=vgt&&e[vgt]\|\|e["@@iterator"],typeof e=="function"?e:null)}var nJt={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSet
2025-03-25 14:56:51 UTC	992	IN	Data Raw: 29 7d 29 2e 6a 6f 69 6e 28 74 5a 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 4a 74 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 64 58 6e 28 65 29 26 26 65 2e 73 70 6c 69 74 28 74 5a 65 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 78 4a 74 2e 65 78 65 63 28 6e 29 3b 69 66 28 72 21 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 69 3d 72 5b 31 5d 2c 6f 3d 72 5b 32 5d 3b 69 3d 3d 3d 22 61 69 64 22 3f 74 2e 61 6e 6f 6e 79 6d 6f 75 73 49 64 3d 6f 3a 74 5b 69 5d 3d 6f 7d 7d 29 2c 74 7d 76 61 72 20 68 58 6e 3d 22 5f 64 64 22 2c 6d 58 6e 3d 22 5f 64 64 5f 72 22 2c 67 58 6e 3d 22 5f 64 64 5f 6c 22 2c 76 58 6e 3d 22 72 75 6d 22 2c 79 58 6e 3d 22 6c 6f 67 73 22 3b 66 75 6e 63 74 69 6f 6e 20 62 58 6e 28 65 29 7b 76 61 72 20 74 3d Data Ascii: )}).join(tZe)}function RJt(e){var t={};return dXn(e)&&e.split(tZe).forEach(function(n){var r=xJt.exec(n);if(r!==null){var i=r[1],o=r[2];i==="aid"?t.anonymousId=o:t[i]=o}}),t}var hXn="_dd",mXn="_dd_r",gXn="_dd_l",vXn="rum",yXn="logs";function bXn(e){var t=
2025-03-25 14:56:51 UTC	8688	IN	Data Raw: 3d 21 21 65 2e 75 73 65 50 61 72 74 69 74 69 6f 6e 65 64 43 72 6f 73 73 53 69 74 65 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 7c 7c 21 21 65 2e 75 73 65 43 72 6f 73 73 53 69 74 65 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 2c 74 2e 70 61 72 74 69 74 69 6f 6e 65 64 3d 21 21 65 2e 75 73 65 50 61 72 74 69 74 69 6f 6e 65 64 43 72 6f 73 73 53 69 74 65 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 2c 65 2e 74 72 61 63 6b 53 65 73 73 69 6f 6e 41 63 72 6f 73 73 53 75 62 64 6f 6d 61 69 6e 73 26 26 28 74 2e 64 6f 6d 61 69 6e 3d 6c 58 6e 28 29 29 2c 74 7d 76 61 72 20 43 58 6e 3d 22 5f 64 64 5f 74 65 73 74 5f 22 3b 66 75 6e 63 74 69 6f 6e 20 45 67 74 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 53 6d 28 29 2c 74 3d 22 22 2e 63 6f 6e 63 61 74 28 43 58 6e 29 2e 63 6f 6e 63 61 74 28 65 29 Data Ascii: =!!e.usePartitionedCrossSiteSessionCookie\|\|!!e.useCrossSiteSessionCookie,t.partitioned=!!e.usePartitionedCrossSiteSessionCookie,e.trackSessionAcrossSubdomains&&(t.domain=lXn()),t}var CXn="_dd_test_";function Egt(){try{var e=Sm(),t="".concat(CXn).concat(e)
2025-03-25 14:56:51 UTC	15928	IN	Data Raw: 73 65 6e 74 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 6d 55 65 2e 47 52 41 4e 54 45 44 2c 73 74 6f 72 65 43 6f 6e 74 65 78 74 73 41 63 72 6f 73 73 50 61 67 65 73 3a 21 21 65 2e 73 74 6f 72 65 43 6f 6e 74 65 78 74 73 41 63 72 6f 73 73 50 61 67 65 73 2c 62 61 74 63 68 42 79 74 65 73 4c 69 6d 69 74 3a 31 36 2a 78 33 2c 65 76 65 6e 74 52 61 74 65 4c 69 6d 69 74 65 72 54 68 72 65 73 68 6f 6c 64 3a 33 65 33 2c 6d 61 78 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 73 50 65 72 50 61 67 65 3a 31 35 2c 66 6c 75 73 68 54 69 6d 65 6f 75 74 3a 33 30 2a 45 6d 2c 62 61 74 63 68 4d 65 73 73 61 67 65 73 4c 69 6d 69 74 3a 35 30 2c 6d 65 73 73 61 67 65 42 79 74 65 73 4c 69 6d 69 74 3a 32 35 36 2a 78 33 7d 2c 4b 58 6e 28 65 29 29 7d 7d 66 75 6e 63 74 Data Ascii: sent)!==null&&o!==void 0?o:mUe.GRANTED,storeContextsAcrossPages:!!e.storeContextsAcrossPages,batchBytesLimit:16x3,eventRateLimiterThreshold:3e3,maxTelemetryEventsPerPage:15,flushTimeout:30Em,batchMessagesLimit:50,messageBytesLimit:256*x3},KXn(e))}}funct
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 65 3a 21 30 7d 29 2e 73 74 6f 70 7d 66 75 6e 63 74 69 6f 6e 20 65 24 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 3d 35 30 30 7d 66 75 6e 63 74 69 6f 6e 20 74 24 74 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 63 6c 6f 6e 65 28 29 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 7d 7d 76 61 72 20 55 51 6e 3d 38 30 2a 78 33 2c 7a 51 6e 3d 33 32 2c 6e 24 74 3d 33 2a 67 4a 74 2c 48 51 6e 3d 52 31 2c 72 24 74 3d 45 6d 3b 66 75 6e 63 74 69 6f 6e 20 69 24 74 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 74 2e 74 72 61 6e 73 70 6f 72 74 53 74 61 74 75 73 3d 3d 3d 30 26 26 74 2e 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 2e 73 69 7a 65 28 29 3d 3d 3d 30 26 26 74 2e 62 61 6e 64 77 69 64 74 68 4d 6f 6e 69 74 6f 72 2e 63 61 6e 48 61 6e 64 6c 65 28 65 29 3f 73 24 74 28 65 2c 74 2c 6e Data Ascii: e:!0}).stop}function e$t(e){return e>=500}function t$t(e){try{return e.clone()}catch{return}}var UQn=80x3,zQn=32,n$t=3gJt,HQn=R1,r$t=Em;function i$t(e,t,n,r,i){t.transportStatus===0&&t.queuedPayloads.size()===0&&t.bandwidthMonitor.canHandle(e)?s$t(e,t,n
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 6e 74 65 78 74 3a 61 2c 73 74 61 74 75 73 3a 72 7d 2c 74 68 69 73 2c 6f 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 69 29 7b 72 3d 3d 3d 76 6f 69 64 20 30 26 26 28 72 3d 59 6f 2e 69 6e 66 6f 29 3b 76 61 72 20 6f 3b 64 6d 65 28 72 2c 57 24 2e 68 74 74 70 2c 74 68 69 73 29 26 26 28 6f 3d 47 42 28 29 29 2c 74 68 69 73 2e 6c 6f 67 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 28 74 2c 6e 2c 72 2c 69 2c 6f 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 4d 61 6e 61 67 65 72 2e 73 65 74 43 6f 6e 74 65 78 74 28 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 Data Ascii: ntext:a,status:r},this,o)},e.prototype.log=function(t,n,r,i){r===void 0&&(r=Yo.info);var o;dme(r,W$.http,this)&&(o=GB()),this.logImplementation(t,n,r,i,o)},e.prototype.setContext=function(t){this.contextManager.setContext(t)},e.prototype.getContext=functi
2025-03-25 14:56:51 UTC	11128	IN	Data Raw: 72 6e 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 68 37 28 65 29 2c 72 29 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 72 3d 68 37 28 65 29 3b 69 66 28 72 21 3d 3d 6e 75 6c 6c 26 26 6e 29 72 65 74 75 72 6e 7b 2e 2e 2e 65 7d 3b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2c 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 5a 65 28 65 2c 74 3d 21 31 29 7b 72 65 74 75 72 6e 20 4b 62 65 28 65 29 7c 7c 61 78 28 65 29 7c 7c 21 66 53 28 65 29 7c 7c 28 6d 37 28 65 29 3e 31 26 26 28 65 2e 73 65 74 3d 65 2e 61 64 64 3d 65 2e 63 6c 65 61 72 3d 65 2e 64 65 6c 65 74 65 3d 68 4a 6e 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 65 29 2c 74 26 26 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 Data Ascii: rn Object.create(h7(e),r)}else{const r=h7(e);if(r!==null&&n)return{...e};const i=Object.create(r);return Object.assign(i,e)}}function fZe(e,t=!1){return Kbe(e)\|\|ax(e)\|\|!fS(e)\|\|(m7(e)>1&&(e.set=e.add=e.clear=e.delete=hJn),Object.freeze(e),t&&Object.entries
2025-03-25 14:56:51 UTC	6396	IN	Data Raw: 69 6f 6e 73 3a 28 29 3d 3e 6f 2c 72 65 73 65 74 52 65 63 6f 6d 70 75 74 61 74 69 6f 6e 73 3a 28 29 3d 3e 7b 6f 3d 30 7d 2c 6d 65 6d 6f 69 7a 65 3a 64 2c 61 72 67 73 4d 65 6d 6f 69 7a 65 3a 66 7d 29 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 72 2c 7b 77 69 74 68 54 79 70 65 73 3a 28 29 3d 3e 72 7d 29 2c 72 7d 76 61 72 20 6d 5a 65 3d 4f 4a 6e 28 67 6d 65 29 2c 49 4a 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 28 65 2c 74 3d 6d 5a 65 29 3d 3e 7b 78 4a 6e 28 65 2c 60 63 72 65 61 74 65 53 74 72 75 63 74 75 72 65 64 53 65 6c 65 63 74 6f 72 20 65 78 70 65 63 74 73 20 66 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 20 77 68 65 72 65 20 65 61 63 68 20 70 72 6f 70 65 72 74 79 20 69 73 20 61 20 Data Ascii: ions:()=>o,resetRecomputations:()=>{o=0},memoize:d,argsMemoize:f})};return Object.assign(r,{withTypes:()=>r}),r}var mZe=OJn(gme),IJn=Object.assign((e,t=mZe)=>{xJn(e,`createStructuredSelector expects first argument to be an object where each property is a
2025-03-25 14:56:51 UTC	2553	IN	Data Raw: 61 6e 63 65 6f 66 20 71 67 74 3f 69 28 78 2e 70 61 79 6c 6f 61 64 2c 70 2c 6c 2c 78 2e 6d 65 74 61 29 3a 69 28 78 2c 70 2c 6c 29 7d 29 5d 29 7d 63 61 74 63 68 28 77 29 7b 45 3d 77 20 69 6e 73 74 61 6e 63 65 6f 66 20 4a 52 65 3f 73 28 6e 75 6c 6c 2c 70 2c 6c 2c 77 2e 70 61 79 6c 6f 61 64 2c 77 2e 6d 65 74 61 29 3a 73 28 77 2c 70 2c 6c 29 7d 66 69 6e 61 6c 6c 79 7b 6d 26 26 66 2e 73 69 67 6e 61 6c 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 6d 29 7d 72 65 74 75 72 6e 20 72 26 26 21 72 2e 64 69 73 70 61 74 63 68 43 6f 6e 64 69 74 69 6f 6e 52 65 6a 65 63 74 69 6f 6e 26 26 73 2e 6d 61 74 63 68 28 45 29 26 26 45 2e 6d 65 74 61 2e 63 6f 6e 64 69 74 69 6f 6e 7c 7c 63 28 45 29 2c 45 7d 28 29 3b 72 65 74 75 72 6e 20 4f 62 Data Ascii: anceof qgt?i(x.payload,p,l,x.meta):i(x,p,l)})])}catch(w){E=w instanceof JRe?s(null,p,l,w.payload,w.meta):s(w,p,l)}finally{m&&f.signal.removeEventListener("abort",m)}return r&&!r.dispatchConditionRejection&&s.match(E)&&E.meta.condition\|\|c(E),E}();return Ob

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:51 UTC	637	OUT	GET /assets/index-C2qvVito.css HTTP/1.1 Host: app.kortex.co Connection: keep-alive Origin: https://app.kortex.co sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:51 UTC	728	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 2994872 Connection: close Date: Tue, 25 Mar 2025 07:45:00 GMT Server: nginx Accept-Ranges: bytes Last-Modified: Fri, 21 Mar 2025 20:59:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 ETag: "sthrmn1s6uw" X-Cache: Hit from cloudfront Via: 1.1 3087aea10f3b11e0dd724415f9afc740.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: O4KzTwqxd81GfiJ_NNXmGx1sHLOsOd6qftBjG0lV9XChOVqncAu_Jg== Age: 25911
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 2a 2c 3a 62 65 66 6f 72 65 2c 3a 61 66 74 65 72 7b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 2d 78 3a 20 30 3b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 2d 79 3a 20 30 3b 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 78 3a 20 30 3b 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 79 3a 20 30 3b 2d 2d 74 77 2d 72 6f 74 61 74 65 3a 20 30 3b 2d 2d 74 77 2d 73 6b 65 77 2d 78 3a 20 30 3b 2d 2d 74 77 2d 73 6b 65 77 2d 79 3a 20 30 3b 2d 2d 74 77 2d 73 63 61 6c 65 2d 78 3a 20 31 3b 2d 2d 74 77 2d 73 63 61 6c 65 2d 79 3a 20 31 3b 2d 2d 74 77 2d 70 61 6e 2d 78 3a 20 3b 2d 2d 74 77 2d 70 61 6e 2d 79 3a 20 3b 2d 2d 74 77 2d 70 69 6e 63 68 2d 7a 6f 6f 6d 3a 20 3b 2d 2d 74 77 2d 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 73 74 72 69 63 74 6e 65 73 73 Data Ascii: *,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 29 7d 2e 68 2d 61 75 74 6f 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 68 2d 66 69 74 7b 68 65 69 67 68 74 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 68 65 69 67 68 74 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 68 2d 66 75 6c 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 68 2d 70 78 7b 68 65 69 67 68 74 3a 31 70 78 7d 2e 68 2d 73 63 72 65 65 6e 7b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 78 2d 68 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 72 65 6d 7d 2e 6d 61 78 2d 68 2d 34 30 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 72 65 6d 7d 2e 6d 61 78 2d 68 2d 35 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 7d 2e 6d 61 78 2d 68 2d 37 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 7d 2e 6d 61 78 2d 68 2d 38 7b 6d 61 78 2d 68 65 Data Ascii: )}.h-auto{height:auto}.h-fit{height:-moz-fit-content;height:fit-content}.h-full{height:100%}.h-px{height:1px}.h-screen{height:100vh}.max-h-4{max-height:1rem}.max-h-40{max-height:10rem}.max-h-5{max-height:1.25rem}.max-h-7{max-height:1.75rem}.max-h-8{max-he
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 7b 63 75 72 73 6f 72 3a 68 65 6c 70 7d 2e 63 75 72 73 6f 72 2d 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 63 75 72 73 6f 72 2d 70 6f 69 6e 74 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 63 75 72 73 6f 72 2d 72 6f 77 2d 72 65 73 69 7a 65 7b 63 75 72 73 6f 72 3a 72 6f 77 2d 72 65 73 69 7a 65 7d 2e 63 75 72 73 6f 72 2d 74 65 78 74 7b 63 75 72 73 6f 72 3a 74 65 78 74 7d 2e 63 75 72 73 6f 72 2d 77 61 69 74 7b 63 75 72 73 6f 72 3a 77 61 69 74 7d 2e 74 6f 75 63 68 2d 6e 6f 6e 65 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 74 6f 75 63 68 2d 70 61 6e 2d 78 7b 2d 2d 74 77 2d 70 61 6e 2d 78 3a 20 70 61 6e 2d 78 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 74 77 2d 70 61 Data Ascii: {cursor:help}.cursor-not-allowed{cursor:not-allowed}.cursor-pointer{cursor:pointer}.cursor-row-resize{cursor:row-resize}.cursor-text{cursor:text}.cursor-wait{cursor:wait}.touch-none{touch-action:none}.touch-pan-x{--tw-pan-x: pan-x;touch-action:var(--tw-pa
2025-03-25 14:56:51 UTC	15287	IN	Data Raw: 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 2e 35 72 65 6d 7d 2e 70 78 2d 31 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 72 65 6d 7d 2e 70 78 2d 32 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 70 78 2d 32 5c 2e 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 36 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 36 32 35 72 65 6d 7d 2e 70 78 2d 33 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 7d 2e 70 78 2d 33 5c 2e 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 38 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 38 Data Ascii: padding-right:2.5rem}.px-16{padding-left:4rem;padding-right:4rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-2\.5{padding-left:.625rem;padding-right:.625rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-3\.5{padding-left:.875rem;padding-right:.8
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 6e 65 73 73 29 20 76 61 72 28 2d 2d 74 77 2d 63 6f 6e 74 72 61 73 74 29 20 76 61 72 28 2d 2d 74 77 2d 67 72 61 79 73 63 61 6c 65 29 20 76 61 72 28 2d 2d 74 77 2d 68 75 65 2d 72 6f 74 61 74 65 29 20 76 61 72 28 2d 2d 74 77 2d 69 6e 76 65 72 74 29 20 76 61 72 28 2d 2d 74 77 2d 73 61 74 75 72 61 74 65 29 20 76 61 72 28 2d 2d 74 77 2d 73 65 70 69 61 29 20 76 61 72 28 2d 2d 74 77 2d 64 72 6f 70 2d 73 68 61 64 6f 77 29 7d 2e 62 72 69 67 68 74 6e 65 73 73 2d 37 35 7b 2d 2d 74 77 2d 62 72 69 67 68 74 6e 65 73 73 3a 20 62 72 69 67 68 74 6e 65 73 73 28 2e 37 35 29 3b 66 69 6c 74 65 72 3a 76 61 72 28 2d 2d 74 77 2d 62 6c 75 72 29 20 76 61 72 28 2d 2d 74 77 2d 62 72 69 67 68 74 6e 65 73 73 29 20 76 61 72 28 2d 2d 74 77 2d 63 6f 6e 74 72 61 73 74 29 20 76 61 72 28 2d Data Ascii: ness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.brightness-75{--tw-brightness: brightness(.75);filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(-
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 63 28 76 61 72 28 2d 2d 74 72 61 63 6b 2d 68 65 69 67 68 74 29 20 2b 20 31 70 78 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 74 72 61 63 6b 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 7d 2e 63 72 6f 70 2d 73 6c 69 64 65 72 2c 2e 63 72 6f 70 2d 73 6c 69 64 65 72 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 72 61 63 6b 2c 2e 63 72 6f 70 2d 73 6c 69 64 65 72 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 68 75 6d 62 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 65 61 73 65 20 2e 31 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 65 61 73 65 20 2e 31 73 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 68 75 6d 62 2d 68 Data Ascii: c(var(--track-height) + 1px);border-radius:var(--track-border-radius)}.crop-slider,.crop-slider::-moz-range-track,.crop-slider::-moz-range-thumb{-moz-appearance:none;appearance:none;-moz-transition:all ease .1s;transition:all ease .1s;height:var(--thumb-h
2025-03-25 14:56:51 UTC	1514	IN	Data Raw: 75 70 5c 2f 74 6f 67 67 6c 65 3a 68 6f 76 65 72 20 2e 67 72 6f 75 70 2d 68 6f 76 65 72 5c 2f 74 6f 67 67 6c 65 5c 3a 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 67 72 6f 75 70 3a 68 6f 76 65 72 20 2e 67 72 6f 75 70 2d 68 6f 76 65 72 5c 3a 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 67 72 6f 75 70 5c 2f 61 63 63 6f 72 64 69 6f 6e 3a 68 6f 76 65 72 20 2e 67 72 6f 75 70 2d 68 6f 76 65 72 5c 2f 61 63 63 6f 72 64 69 6f 6e 5c 3a 68 2d 34 7b 68 65 69 67 68 74 3a 31 72 65 6d 7d 2e 67 72 6f 75 70 5c 2f 61 63 63 6f 72 64 69 6f 6e 3a 68 6f 76 65 72 20 2e 67 72 6f 75 70 2d 68 6f 76 65 72 5c 2f 61 63 63 6f 72 64 69 6f 6e 5c 3a 77 2d 34 7b 77 69 64 74 68 3a 31 72 65 6d 7d 2e 67 72 6f 75 70 5c 2f 65 78 70 6c 6f 72 65 72 2d 69 74 65 6d 3a Data Ascii: up\/toggle:hover .group-hover\/toggle\:block{display:block}.group:hover .group-hover\:flex{display:flex}.group\/accordion:hover .group-hover\/accordion\:h-4{height:1rem}.group\/accordion:hover .group-hover\/accordion\:w-4{width:1rem}.group\/explorer-item:
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 72 29 20 76 61 72 28 2d 2d 74 77 2d 62 72 69 67 68 74 6e 65 73 73 29 20 76 61 72 28 2d 2d 74 77 2d 63 6f 6e 74 72 61 73 74 29 20 76 61 72 28 2d 2d 74 77 2d 67 72 61 79 73 63 61 6c 65 29 20 76 61 72 28 2d 2d 74 77 2d 68 75 65 2d 72 6f 74 61 74 65 29 20 76 61 72 28 2d 2d 74 77 2d 69 6e 76 65 72 74 29 20 76 61 72 28 2d 2d 74 77 2d 73 61 74 75 72 61 74 65 29 20 76 61 72 28 2d 2d 74 77 2d 73 65 70 69 61 29 20 76 61 72 28 2d 2d 74 77 2d 64 72 6f 70 2d 73 68 61 64 6f 77 29 7d 2e 67 72 6f 75 70 3a 68 6f 76 65 72 20 2e 67 72 6f 75 70 2d 68 6f 76 65 72 5c 3a 62 61 63 6b 64 72 6f 70 2d 62 6c 75 72 2d 73 6d 7b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 62 6c 75 72 3a 20 62 6c 75 72 28 34 70 78 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 Data Ascii: r) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.group:hover .group-hover\:backdrop-blur-sm{--tw-backdrop-blur: blur(4px);-webkit-backdrop-filter
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 68 74 2d 72 61 64 69 75 73 3a 63 61 6c 63 28 76 61 72 28 2d 2d 72 61 64 69 75 73 29 20 2d 20 32 70 78 29 7d 2e 5c 5b 5c 26 5c 3a 68 61 73 5c 28 5c 3e 5c 2e 64 61 79 2d 72 61 6e 67 65 2d 73 74 61 72 74 5c 29 5c 5d 5c 3a 72 6f 75 6e 64 65 64 2d 6c 2d 6d 64 3a 68 61 73 28 3e 2e 64 61 79 2d 72 61 6e 67 65 2d 73 74 61 72 74 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 63 61 6c 63 28 76 61 72 28 2d 2d 72 61 64 69 75 73 29 20 2d 20 32 70 78 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 63 61 6c 63 28 76 61 72 28 2d 2d 72 61 64 69 75 73 29 20 2d 20 32 70 78 29 7d 2e 5c 5b 5c 26 5c 3a 68 61 73 5c 28 5c 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 5c 5d 5c 29 5c 5d 5c 3a 72 6f 75 6e 64 65 64 2d 6d 64 Data Ascii: ht-radius:calc(var(--radius) - 2px)}.\[\&\:has\(\>\.day-range-start\)\]\:rounded-l-md:has(>.day-range-start){border-top-left-radius:calc(var(--radius) - 2px);border-bottom-left-radius:calc(var(--radius) - 2px)}.\[\&\:has\(\[aria-selected\]\)\]\:rounded-md
2025-03-25 14:56:51 UTC	16384	IN	Data Raw: 3a 72 67 62 61 28 32 34 2c 32 34 2c 32 34 2c 76 61 72 28 2d 2d 62 67 2d 6f 70 61 63 69 74 79 2c 20 31 29 29 7d 2e 6c 69 67 68 74 2d 6d 6f 64 65 20 2e 62 67 2d 6e 65 75 74 72 61 6c 2d 32 2c 2e 6c 69 67 68 74 2d 6d 6f 64 65 20 2e 68 6f 76 65 72 5c 3a 62 67 2d 6e 65 75 74 72 61 6c 2d 32 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 37 32 2c 37 32 2c 38 32 2c 76 61 72 28 2d 2d 62 67 2d 6f 70 61 63 69 74 79 2c 20 31 29 29 7d 2e 6c 69 67 68 74 2d 6d 6f 64 65 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 5c 3a 62 67 2d 6e 65 75 74 72 61 6c 2d 32 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 37 32 2c 37 32 2c 38 32 2c 76 61 72 28 2d 2d 62 67 2d 6f 70 61 63 69 74 79 2c 20 31 29 29 7d 2e 6c Data Ascii: :rgba(24,24,24,var(--bg-opacity, 1))}.light-mode .bg-neutral-2,.light-mode .hover\:bg-neutral-2:hover{background:rgba(72,72,82,var(--bg-opacity, 1))}.light-mode .placeholder\:bg-neutral-2::-moz-placeholder{background:rgba(72,72,82,var(--bg-opacity, 1))}.l

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:51 UTC	570	OUT	GET /v3/pricing-table.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://app.kortex.co/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:52 UTC	698	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10149 Last-Modified: Mon, 24 Mar 2025 20:42:23 GMT ETag: "7a7eb6b008019a5ef829ab4b010a776e" Cache-Control: max-age=60 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 0 Date: Tue, 25 Mar 2025 14:56:52 GMT Via: 1.1 varnish X-Request-ID: 9c97de4c-1ea6-4b7b-b57d-8bbbed0258e8 X-Served-By: cache-lga21947-LGA X-Cache: MISS X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-25 14:56:52 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 Data Ascii: !function(){"use strict";function e(e,t){for(var r=0;r<t.length;r++){var i=t[r];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function t(e,r){return t=Object.setPrototypeOf?Object.setPrototy
2025-03-25 14:56:52 UTC	1378	IN	Data Raw: 2c 69 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6f 7d 2c 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 61 70 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 61 72 67 75 6d 65 6e 74 73 2c 72 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 69 66 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 28 6f 3d 65 2c 2d 31 3d 3d 3d 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6f 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 29 29 72 65 74 75 72 Data Ascii: ,i.prototype),o},a.apply(null,arguments)}function s(e){var i="function"==typeof Map?new Map:void 0;return s=function(e){function n(){return a(e,arguments,r(this).constructor)}if(null===e\|\|(o=e,-1===Function.toString.call(o).indexOf("[native code]")))retur
2025-03-25 14:56:52 UTC	1378	IN	Data Raw: 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 76 61 72 20 6c 2c 68 3d 2f 5e 28 68 74 74 70 28 73 29 3f 29 3a 5c 2f 5c 2f 2f 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 68 2e 74 65 73 74 28 65 29 7d 28 65 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3b 74 72 79 7b 74 3d 6e 65 77 20 55 52 4c 28 65 29 7d 63 61 74 63 68 28 72 29 7b 28 74 3d 64 6f 63 75 6d 65 6e 74 Data Ascii: structure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}var l,h=/^(http(s)?):\/\//,f=function(e){if(!function(e){return h.test(e)}(e))return null;var t;try{t=new URL(e)}catch(r){(t=document
2025-03-25 14:56:52 UTC	1378	IN	Data Raw: 67 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 4c 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 65 3d 66 2e 63 61 6c 6c 28 74 68 69 73 29 29 2e 75 6e 69 71 75 65 49 64 3d 6e 75 6c 6c 2c 65 2e 69 6e 69 74 69 61 6c 52 65 6e 64 65 72 65 64 48 65 69 67 68 74 53 65 74 3d 21 31 2c 65 2e 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 48 61 73 52 75 6e 3d 21 31 2c 65 2e 66 72 61 6d 65 3d 65 2e 63 72 65 61 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 2c 65 2e 61 74 74 61 63 68 53 68 61 64 6f 77 44 6f 6d 28 29 2c 65 7d 21 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 69 66 28 22 66 75 6e 63 74 69 Data Ascii: g.removeEventListener,L=document.location.href,w=function(n){function a(){var e;return(e=f.call(this)).uniqueId=null,e.initialRenderedHeightSet=!1,e.connectedCallbackHasRun=!1,e.frame=e.createIframeElement(),e.attachShadowDom(),e}!function(e,r){if("functi
2025-03-25 14:56:52 UTC	1378	IN	Data Raw: 69 71 75 65 49 64 3d 74 68 69 73 2e 63 72 65 61 74 65 55 6e 69 71 75 65 49 64 28 29 2c 74 68 69 73 2e 61 64 64 46 72 61 6d 65 4c 6f 61 64 4c 69 73 74 65 6e 65 72 28 29 2c 74 68 69 73 2e 61 64 64 50 6f 73 74 4d 65 73 73 61 67 65 4c 69 73 74 65 6e 65 72 28 29 2c 74 68 69 73 2e 61 64 64 50 61 67 65 53 68 6f 77 4c 69 73 74 65 6e 65 72 28 29 2c 74 68 69 73 2e 73 65 74 49 66 72 61 6d 65 53 72 63 28 29 7d 7d 2c 7b 6b 65 79 3a 22 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 46 72 61 6d 65 4c 6f 61 64 4c 69 73 74 65 6e 65 72 28 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 50 6f 73 74 4d 65 73 73 61 67 65 4c 69 73 74 65 6e 65 72 28 29 2c 74 68 69 73 2e 72 65 6d 6f 76 Data Ascii: iqueId=this.createUniqueId(),this.addFrameLoadListener(),this.addPostMessageListener(),this.addPageShowListener(),this.setIframeSrc()}},{key:"disconnectedCallback",value:function(){this.removeFrameLoadListener(),this.removePostMessageListener(),this.remov
2025-03-25 14:56:52 UTC	1378	IN	Data Raw: 65 4c 6f 61 64 4c 69 73 74 65 6e 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 49 28 74 68 69 73 2e 66 72 61 6d 65 2c 22 6c 6f 61 64 22 2c 74 68 69 73 2e 66 72 61 6d 65 4c 6f 61 64 4c 69 73 74 65 6e 65 72 2c 21 31 29 7d 7d 2c 7b 6b 65 79 3a 22 70 6f 73 74 4d 65 73 73 61 67 65 4c 69 73 74 65 6e 65 72 46 75 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 79 28 65 2e 6f 72 69 67 69 6e 29 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 3b 6e 75 6c 6c 21 3d 3d 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 69 66 72 61 6d 65 48 65 69 67 68 74 22 3d 3d 3d 74 2e 69 64 26 26 74 2e 75 75 69 64 3d 3d 3d 74 68 69 73 2e 75 6e 69 71 75 65 49 64 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e Data Ascii: eLoadListener",value:function(){I(this.frame,"load",this.frameLoadListener,!1)}},{key:"postMessageListenerFunc",value:function(e){if(y(e.origin)){var t=e.data;null!==t&&"object"==typeof t&&"iframeHeight"===t.id&&t.uuid===this.uniqueId&&"number"==typeof t.
2025-03-25 14:56:52 UTC	1378	IN	Data Raw: 6f 77 4c 69 73 74 65 6e 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 49 28 77 69 6e 64 6f 77 2c 22 70 61 67 65 73 68 6f 77 22 2c 74 68 69 73 2e 70 61 67 65 53 68 6f 77 4c 69 73 74 65 6e 65 72 29 2c 49 28 74 68 69 73 2e 66 72 61 6d 65 2c 22 6c 6f 61 64 22 2c 74 68 69 73 2e 72 65 49 6e 69 74 69 61 6c 69 7a 65 49 66 72 61 6d 65 2c 21 31 29 7d 7d 2c 7b 6b 65 79 3a 22 63 72 65 61 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 2c 22 69 6d 70 6f Data Ascii: owListener",value:function(){I(window,"pageshow",this.pageShowListener),I(this.frame,"load",this.reInitializeIframe,!1)}},{key:"createIframeElement",value:function(){var e=document.createElement("iframe");return e.style.setProperty("display","block","impo
2025-03-25 14:56:52 UTC	503	IN	Data Raw: 2d 65 6d 61 69 6c 22 3a 74 68 69 73 2e 6d 65 73 73 61 67 65 49 66 72 61 6d 65 28 7b 69 64 3a 22 63 75 73 74 6f 6d 65 72 45 6d 61 69 6c 22 2c 76 61 6c 75 65 3a 72 7d 29 2c 74 68 69 73 2e 63 75 73 74 6f 6d 65 72 45 6d 61 69 6c 3d 72 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 69 63 69 6e 67 2d 74 61 62 6c 65 2d 69 64 22 3a 74 68 69 73 2e 70 72 69 63 69 6e 67 54 61 62 6c 65 49 64 3d 72 2c 74 68 69 73 2e 72 65 6c 6f 61 64 49 66 72 61 6d 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 75 62 6c 69 73 68 61 62 6c 65 2d 6b 65 79 22 3a 74 68 69 73 2e 70 75 62 6c 69 73 68 61 62 6c 65 41 70 69 4b 65 79 3d 72 2c 74 68 69 73 2e 72 65 6c 6f 61 64 49 66 72 61 6d 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 5f 5f 6c 6f 63 61 6c 65 2d 6f 76 65 72 72 69 64 65 22 3a 74 68 69 Data Ascii: -email":this.messageIframe({id:"customerEmail",value:r}),this.customerEmail=r;break;case"pricing-table-id":this.pricingTableId=r,this.reloadIframe();break;case"publishable-key":this.publishableApiKey=r,this.reloadIframe();break;case"__locale-override":thi

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:51 UTC	565	OUT	GET /fpr.js HTTP/1.1 Host: cdn.firstpromoter.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://app.kortex.co/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:52 UTC	471	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4842 Connection: close Date: Mon, 24 Mar 2025 16:20:08 GMT Last-Modified: Mon, 07 Feb 2022 04:29:32 GMT ETag: "d53f26ce71a7333d477b01f52bdade3e" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 410372c9ac35ccad4a4fd5dbf80c9f38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: Licdz7BV2rRIL5iJzcZVPkk38ZtxN2aAwGPfnYzyCEvWktJHwFNGNg== Age: 81405
2025-03-25 14:56:52 UTC	4842	IN	Data Raw: 76 61 72 20 46 50 52 4f 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 7b 7d 2c 72 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 66 69 72 73 74 70 72 6f 6d 6f 74 65 72 2e 63 6f 6d 2f 74 72 22 2c 6e 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 66 69 72 73 74 70 72 6f 6d 6f 74 65 72 2e 63 6f 6d 2f 67 65 74 5f 64 65 74 61 69 6c 73 22 2c 66 3d 6e 75 6c 6c 2c 74 3d 22 5f 66 70 72 6f 6d 5f 64 65 74 61 69 6c 73 22 2c 69 3d 22 5f 66 70 72 6f 6d 5f 74 69 64 22 2c 6f 3d 22 5f 66 70 72 6f 6d 5f 72 65 66 22 2c 65 3d 38 36 34 30 30 2c 61 3d 31 34 34 30 2c 75 3d 5b 22 66 70 5f 72 65 66 22 2c 22 66 70 72 22 2c 22 76 69 61 22 2c 22 72 65 66 22 2c 22 61 22 2c 22 5f 66 72 6f 6d 22 2c 22 5f 62 79 22 2c 22 64 65 61 6c 22 2c 22 5f 67 6f 22 2c 22 Data Ascii: var FPROM=function(){"use strict";var c={},r="https://t.firstpromoter.com/tr",n="https://t.firstpromoter.com/get_details",f=null,t="_fprom_details",i="_fprom_tid",o="_fprom_ref",e=86400,a=1440,u=["fp_ref","fpr","via","ref","a","_from","_by","deal","_go","

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:54 UTC	474	OUT	GET /assets/searchWorker-CKHFGOU0.js HTTP/1.1 Host: app.kortex.co Connection: keep-alive Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:54 UTC	731	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 41560 Connection: close Date: Tue, 25 Mar 2025 09:52:39 GMT Server: nginx Accept-Ranges: bytes ETag: "sthrmnw2g" Last-Modified: Fri, 21 Mar 2025 20:59:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 X-Cache: Hit from cloudfront Via: 1.1 cd691f5232ad8151e816e4693db0dfac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: hqiH-XVgxSRsO5fX4ByIM807ueLA7Lhdtr8KLgROtBWfk2BWcC6TkA== Age: 18255
2025-03-25 14:56:54 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 2a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 63 6f 6e 73 74 20 67 74 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e 6b 2e 70 72 6f 78 79 22 29 2c 24 74 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e 6b 2e 65 6e 64 70 6f 69 6e 74 22 29 2c 55 74 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e 6b 2e 72 65 6c 65 61 73 65 50 72 6f 78 79 22 29 2c 56 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e 6b 2e 66 69 6e 61 6c 69 7a 65 72 22 29 2c 4e 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e Data Ascii: (function(){"use strict";/** * @license * Copyright 2019 Google LLC * SPDX-License-Identifier: Apache-2.0 */const gt=Symbol("Comlink.proxy"),$t=Symbol("Comlink.endpoint"),Ut=Symbol("Comlink.releaseProxy"),V=Symbol("Comlink.finalizer"),N=Symbol("Comlin
2025-03-25 14:56:54 UTC	10463	IN	Data Raw: 70 6c 75 63 6b 29 7c 7c 6e 2e 69 6e 64 65 78 7c 7c 6e 2e 66 69 65 6c 64 2c 6c 3d 6e 2e 74 61 67 2c 63 3d 74 68 69 73 2e 73 74 6f 72 65 26 26 6e 2e 65 6e 72 69 63 68 2c 61 3d 6e 2e 62 6f 6f 6c 3d 3d 3d 22 61 6e 64 22 2c 74 3d 6e 2e 6c 69 6d 69 74 7c 7c 74 7c 7c 31 30 30 2c 67 3d 6e 2e 6f 66 66 73 65 74 7c 7c 30 2c 6c 26 26 28 62 28 6c 29 26 26 28 6c 3d 5b 6c 5d 29 2c 21 65 29 29 7b 66 6f 72 28 6c 65 74 20 66 3d 30 2c 6d 3b 66 3c 6c 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 28 6d 3d 64 65 2e 63 61 6c 6c 28 74 68 69 73 2c 6c 5b 66 5d 2c 74 2c 67 2c 63 29 29 26 26 28 72 5b 72 2e 6c 65 6e 67 74 68 5d 3d 6d 2c 75 2b 2b 29 3b 72 65 74 75 72 6e 20 75 3f 72 3a 5b 5d 7d 62 28 68 29 26 26 28 68 3d 5b 68 5d 29 7d 68 7c 7c 28 68 3d 74 68 69 73 2e 68 29 2c 61 3d 61 26 26 28 Data Ascii: pluck)\|\|n.index\|\|n.field,l=n.tag,c=this.store&&n.enrich,a=n.bool==="and",t=n.limit\|\|t\|\|100,g=n.offset\|\|0,l&&(b(l)&&(l=[l]),!e)){for(let f=0,m;f<l.length;f++)(m=de.call(this,l[f],t,g,c))&&(r[r.length]=m,u++);return u?r:[]}b(h)&&(h=[h])}h\|\|(h=this.h),a=a&&(
2025-03-25 14:56:54 UTC	14713	IN	Data Raw: 5f 61 6c 6c 6f 63 61 74 6f 72 2e 73 65 67 6d 65 6e 74 49 44 4c 6f 6f 6b 75 70 28 68 29 3b 72 65 74 75 72 6e 7b 73 65 67 6d 65 6e 74 49 6e 64 65 78 3a 61 2c 6f 62 6a 65 63 74 4b 65 79 3a 6c 7d 7d 29 3b 72 65 74 75 72 6e 20 63 2e 73 6f 72 74 28 28 68 2c 6c 29 3d 3e 68 2e 73 65 67 6d 65 6e 74 49 6e 64 65 78 2d 6c 2e 73 65 67 6d 65 6e 74 49 6e 64 65 78 29 2c 7b 6d 61 74 63 68 69 6e 67 51 75 65 72 79 3a 72 2c 6d 61 74 63 68 65 73 3a 63 7d 7d 67 65 74 53 65 67 6d 65 6e 74 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6f 62 6a 65 63 74 54 61 62 6c 65 5b 74 2e 6f 62 6a 65 63 74 4b 65 79 5d 2e 73 65 67 6d 65 6e 74 73 5b 74 2e 73 65 67 6d 65 6e 74 49 6e 64 65 78 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 53 65 74 Data Ascii: _allocator.segmentIDLookup(h);return{segmentIndex:a,objectKey:l}});return c.sort((h,l)=>h.segmentIndex-l.segmentIndex),{matchingQuery:r,matches:c}}getSegment(t){return this._objectTable[t.objectKey].segments[t.segmentIndex]}}function Oe(e){const t=new Set

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:54 UTC	553	OUT	GET /v3 HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://app.kortex.co/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:54 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 742093 Last-Modified: Mon, 24 Mar 2025 21:20:56 GMT ETag: "da03ec8874569e23eb6cef5a480a49fd" Cache-Control: max-age=60 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 112 Date: Tue, 25 Mar 2025 14:56:54 GMT Via: 1.1 varnish X-Request-ID: 0b4bfa54-ea57-433e-a200-c98593500bbf X-Served-By: cache-lga21963-LGA X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 74 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 3d 7b 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 2e 6c 65 6e 67 74 68 7c 7c 28 61 28 29 2c 21 30 29 2c 6c 5b 6c 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 65 34 32 62 64 64 30 65 2e 73 76 67 22 7d 2c 36 36 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 6e 6e 2d 65 66 30 64 61 34 62 33 36 31 34 32 63 32 38 37 31 38 61 64 32 34 62 61 65 64 63 35 38 34 35 33 2e 73 76 67 22 7d 2c 39 38 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 72 61 62 6f 62 61 6e 6b 2d 64 63 35 31 38 37 65 38 34 31 33 34 31 39 39 37 35 66 64 61 39 61 37 32 61 30 38 63 32 35 61 33 2e 73 76 67 22 7d 2c 33 32 36 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 Data Ascii: e42bdd0e.svg"},6628:function(e,t,n){e.exports=n.p+"fingerprinted/img/nn-ef0da4b36142c28718ad24baedc58453.svg"},9824:function(e,t,n){e.exports=n.p+"fingerprinted/img/rabobank-dc5187e8413419975fda9a72a08c25a3.svg"},3260:function(e,t,n){e.exports=n.p+"finger
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 54 44 4c 6f 67 6f 2d 31 39 63 34 30 37 34 66 33 38 38 65 61 34 61 65 34 62 61 64 33 35 37 34 30 38 37 63 64 61 66 61 2e 73 76 67 22 7d 2c 36 31 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 55 53 41 41 4c 6f 67 6f 2d 63 30 33 63 36 38 30 62 62 37 30 31 30 36 63 62 62 61 30 38 33 61 34 36 66 35 65 63 35 35 39 34 2e 73 76 67 22 7d 2c 32 35 33 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 55 53 42 61 6e 6b 4c 6f 67 6f 2d 64 39 35 66 33 61 36 Data Ascii: ){e.exports=n.p+"fingerprinted/img/TDLogo-19c4074f388ea4ae4bad3574087cdafa.svg"},6119:function(e,t,n){e.exports=n.p+"fingerprinted/img/USAALogo-c03c680bb70106cbba083a46f5ec5594.svg"},2531:function(e,t,n){e.exports=n.p+"fingerprinted/img/USBankLogo-d95f3a6
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 36 29 2c 73 3d 6e 28 35 32 36 35 29 3b 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 6f 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 69 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 61 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 63 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 32 37 30 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 36 33 39 29 2e 53 79 6d 62 6f 6c 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 38 34 37 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 31 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 6e Data Ascii: 6),s=n(5265);r.prototype.clear=o,r.prototype.delete=i,r.prototype.get=a,r.prototype.has=c,r.prototype.set=s,e.exports=r},2705:function(e,t,n){var r=n(5639).Symbol;e.exports=r},8470:function(e,t,n){var r=n(7813);e.exports=function(e,t){for(var n=e.length;n
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 69 2e 63 61 6c 6c 28 65 2c 63 29 2c 6e 3d 65 5b 63 5d 3b 74 72 79 7b 65 5b 63 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 6f 3d 61 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 3f 65 5b 63 5d 3d 6e 3a 64 65 6c 65 74 65 20 65 5b 63 5d 29 2c 6f 7d 7d 2c 37 38 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 74 5d 7d 7d 2c 31 37 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 35 33 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 Data Ascii: .exports=function(e){var t=i.call(e,c),n=e[c];try{e[c]=void 0;var r=!0}catch(e){}var o=a.call(e);return r&&(t?e[c]=n:delete e[c]),o}},7801:function(e){e.exports=function(e,t){return null==e?void 0:e[t]}},1789:function(e,t,n){var r=n(4536);e.exports=functi
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2c 6e 3d 72 28 74 2c 65 29 3b 72 65 74 75 72 6e 21 28 6e 3c 30 29 26 26 28 6e 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 3f 74 2e 70 6f 70 28 29 3a 6f 2e 63 61 6c 6c 28 74 2c 6e 2c 31 29 2c 2d 2d 74 68 69 73 2e 73 69 7a 65 2c 21 30 29 7d 7d 2c 32 31 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 34 37 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2c 6e 3d 72 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 6e 3c 30 3f 76 6f 69 64 20 30 3a 74 5b 6e 5d 5b 31 5d 7d 7d 2c 37 35 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 34 37 30 29 3b 65 2e 65 78 70 6f 72 74 Data Ascii: var t=this.__data__,n=r(t,e);return!(n<0)&&(n==t.length-1?t.pop():o.call(t,n,1),--this.size,!0)}},2117:function(e,t,n){var r=n(8470);e.exports=function(e){var t=this.__data__,n=r(t,e);return n<0?void 0:t[n][1]}},7518:function(e,t,n){var r=n(8470);e.export
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 79 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 65 2b 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 7d 2c 37 38 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 7c 7c 65 21 3d 65 26 26 74 21 3d 74 7d 7d 2c 33 35 36 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 32 33 39 29 2c 6f 3d 6e 28 33 32 31 38 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6f 28 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 72 28 65 29 3b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d Data Ascii: y{return t.call(e)}catch(e){}try{return e+""}catch(e){}}return""}},7813:function(e){e.exports=function(e,t){return e===t\|\|e!=e&&t!=t}},3560:function(e,t,n){var r=n(4239),o=n(3218);e.exports=function(e){if(!o(e))return!1;var t=r(e);return"[object Function]
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 6b 6c 6d 6e 6f 70 71 72 73 74 22 2e 73 70 6c 69 74 28 22 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 5b 65 5d 3d 65 7d 29 29 2c 22 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 22 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 72 29 29 2e 6a 6f 69 6e 28 22 22 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 69 2c 61 2c 63 3d 74 28 65 29 2c 73 3d 31 3b 73 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 66 6f 72 28 76 61 72 20 75 20 69 6e 20 69 3d 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 72 2e 63 61 Data Ascii: klmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(e){return!1}}()?Object.assign:function(e){for(var i,a,c=t(e),s=1;s<arguments.length;s++){for(var u in i=Object(arguments[s]))r.ca
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 28 6e 2e 62 69 6e 64 28 74 29 2c 65 29 7d 65 2e 5f 38 31 3d 31 2c 65 2e 5f 36 35 3d 74 2c 73 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 65 2e 5f 38 31 3d 32 2c 65 2e 5f 36 35 3d 74 2c 6f 2e 5f 39 37 26 26 6f 2e 5f 39 37 28 65 2c 74 29 2c 73 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 31 3d 3d 3d 65 2e 5f 34 35 26 26 28 69 28 65 2c 65 2e 5f 35 34 29 2c 65 2e 5f 35 34 3d 6e 75 6c 6c 29 2c 32 3d 3d 3d 65 2e 5f 34 35 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 5f 35 34 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 28 65 2c 65 2e 5f 35 34 5b 74 5d 29 3b 65 2e 5f 35 34 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 Data Ascii: n)return void l(n.bind(t),e)}e._81=1,e._65=t,s(e)}function c(e,t){e._81=2,e._65=t,o._97&&o._97(e,t),s(e)}function s(e){if(1===e._45&&(i(e,e._54),e._54=null),2===e._45){for(var t=0;t<e._54.length;t++)i(e,e._54[t]);e._54=null}}function u(e,t,n){this.onFulfi
2025-03-25 14:56:54 UTC	1378	IN	Data Raw: 6e 65 77 20 6f 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 61 2c 63 29 7b 69 66 28 63 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 29 29 7b 69 66 28 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 26 26 63 2e 74 68 65 6e 3d 3d 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 29 7b 66 6f 72 28 3b 33 3d 3d 3d 63 2e 5f 38 31 3b 29 63 3d 63 2e 5f 36 35 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 63 2e 5f 38 31 3f 72 28 61 2c 63 2e 5f 36 35 29 3a 28 32 3d 3d 3d 63 2e 5f 38 31 26 26 6e 28 63 2e 5f 36 35 29 2c 76 6f 69 64 20 63 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 61 2c 65 29 7d 29 2c 6e 29 29 7d 76 61 72 20 73 3d 63 2e 74 68 65 Data Ascii: new o((function(e,n){function r(a,c){if(c&&("object"==typeof c\|\|"function"==typeof c)){if(c instanceof o&&c.then===o.prototype.then){for(;3===c._81;)c=c._65;return 1===c._81?r(a,c._65):(2===c._81&&n(c._65),void c.then((function(e){r(a,e)}),n))}var s=c.the

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:54 UTC	739	OUT	GET /realms/kortex/protocol/openid-connect/3p-cookies/step1.html HTTP/1.1 Host: auth.kortex.co Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://app.kortex.co/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:54 UTC	464	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 14:56:54 GMT Content-Type: text/html;charset=utf-8 Content-Length: 2318 Connection: close Server: nginx Cache-Control: no-cache, must-revalidate, no-transform, no-store Content-Security-Policy: frame-src 'self' https://www.google.com; Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none X-XSS-Protection: 1; mode=block
2025-03-25 14:56:54 UTC	2318	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 3e 0a 20 20 20 20 20 20 63 68 65 63 6b 53 74 6f 72 61 67 65 41 63 63 65 73 73 28 29 3b 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 53 74 6f 72 61 67 65 41 63 63 65 73 73 28 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 69 66 20 74 68 65 20 62 72 6f 77 73 65 72 20 68 61 73 20 67 72 61 6e 74 65 64 20 75 73 20 61 63 63 65 73 73 20 74 6f 20 33 72 64 2d 70 61 72 74 79 20 73 74 6f 72 Data Ascii: <!doctype html><html> <head> <meta charset="utf-8"> </head> <body> <script type="module"> checkStorageAccess(); async function checkStorageAccess() { // Check if the browser has granted us access to 3rd-party stor

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:54 UTC	589	OUT	GET /manifest.webmanifest HTTP/1.1 Host: app.kortex.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:54 UTC	712	IN	HTTP/1.1 200 OK Content-Type: application/manifest+json Content-Length: 191 Connection: close Date: Tue, 25 Mar 2025 14:56:54 GMT Server: nginx Accept-Ranges: bytes Etag: "sthrmn5b" Last-Modified: Fri, 21 Mar 2025 20:59:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 X-Cache: Miss from cloudfront Via: 1.1 f875ba0ddbd90a5e7c9a82af3af607f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: -NIXTT8043G1uecjGRQ6ztoEE08EgBdvZ80sZ6lsirRM272s_s7jlg==
2025-03-25 14:56:54 UTC	191	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4b 6f 72 74 65 78 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 4b 6f 72 74 65 78 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 6e 20 49 44 45 20 66 6f 72 20 77 72 69 74 65 72 73 22 2c 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 22 23 30 30 30 30 30 30 22 7d 0a Data Ascii: {"name":"Kortex","short_name":"Kortex","start_url":"/","display":"standalone","background_color":"#ffffff","lang":"en","scope":"/","description":"An IDE for writers","theme_color":"#000000"}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Windows Analysis Report
https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:54 UTC	785	OUT	GET /realms/kortex/protocol/openid-connect/3p-cookies/step2.html HTTP/1.1 Host: auth.kortex.co Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: KEYCLOAK_3P_COOKIE_SAMESITE=supported; KEYCLOAK_3P_COOKIE=supported
2025-03-25 14:56:55 UTC	463	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 14:56:55 GMT Content-Type: text/html;charset=utf-8 Content-Length: 686 Connection: close Server: nginx Cache-Control: no-cache, must-revalidate, no-transform, no-store Content-Security-Policy: frame-src 'self' https://www.google.com; Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none X-XSS-Protection: 1; mode=block
2025-03-25 14:56:55 UTC	686	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 3e 0a 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 69 66 20 74 68 65 20 70 72 65 76 69 6f 75 73 6c 79 20 70 6c 61 63 65 64 20 63 6f 6f 6b 69 65 73 20 65 78 69 73 74 20 74 6f 20 64 65 74 65 63 74 20 73 75 70 70 6f 72 74 20 66 6f 72 20 33 72 64 2d 70 61 72 74 79 20 61 63 63 65 73 73 2e 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 68 61 73 41 63 63 65 73 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 63 6c 75 64 65 73 28 22 4b 45 59 43 4c 4f Data Ascii: <!doctype html><html> <head> <meta charset="utf-8"> </head> <body> <script type="module"> // Check if the previously placed cookies exist to detect support for 3rd-party access. const hasAccess = document.cookie.includes("KEYCLO

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:55 UTC	580	OUT	GET /assets/sqlite3Worker-DnFqcIer.js HTTP/1.1 Host: app.kortex.co Connection: keep-alive Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=logs=1&id=59a83584-23ae-494b-a07b-95231b0966e5&created=1742914613197&expire=1742915513197
2025-03-25 14:56:55 UTC	733	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 219761 Connection: close Date: Tue, 25 Mar 2025 09:52:40 GMT Server: nginx Accept-Ranges: bytes ETag: "sthrmn4pkh" Last-Modified: Fri, 21 Mar 2025 20:59:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 X-Cache: Hit from cloudfront Via: 1.1 1ecf1db0c771b8f74edd4bd269377c1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: jUnKzjkJ4Ftvm3QB6P7Go7FfNuqNJO4gf1BA5XveHcdv9iQL48Cv3g== Age: 18255
2025-03-25 14:56:55 UTC	15990	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 2a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 63 6f 6e 73 74 20 55 74 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e 6b 2e 70 72 6f 78 79 22 29 2c 79 6e 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e 6b 2e 65 6e 64 70 6f 69 6e 74 22 29 2c 71 6e 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e 6b 2e 72 65 6c 65 61 73 65 50 72 6f 78 79 22 29 2c 77 74 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c 69 6e 6b 2e 66 69 6e 61 6c 69 7a 65 72 22 29 2c 5f 74 3d 53 79 6d 62 6f 6c 28 22 43 6f 6d 6c Data Ascii: (function(){"use strict";/** * @license * Copyright 2019 Google LLC * SPDX-License-Identifier: Apache-2.0 */const Ut=Symbol("Comlink.proxy"),yn=Symbol("Comlink.endpoint"),qn=Symbol("Comlink.releaseProxy"),wt=Symbol("Comlink.finalizer"),_t=Symbol("Coml
2025-03-25 14:56:55 UTC	394	IN	Data Raw: 20 72 65 63 65 69 76 65 64 20 24 7b 6f 74 28 72 29 7d 20 24 7b 6f 74 28 65 29 7d 60 29 2c 71 65 5b 30 5d 21 3d 31 36 36 38 35 30 39 30 32 39 26 26 41 65 28 22 52 75 6e 74 69 6d 65 20 65 72 72 6f 72 3a 20 54 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 68 61 73 20 63 6f 72 72 75 70 74 65 64 20 69 74 73 20 68 65 61 70 20 6d 65 6d 6f 72 79 20 61 72 65 61 20 28 61 64 64 72 65 73 73 20 7a 65 72 6f 29 21 22 29 7d 7d 76 61 72 20 59 74 3d 5b 5d 2c 58 74 3d 5b 5d 2c 5a 74 3d 5b 5d 2c 79 74 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 65 72 28 29 7b 69 66 28 6c 2e 70 72 65 52 75 6e 29 66 6f 72 28 74 79 70 65 6f 66 20 6c 2e 70 72 65 52 75 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6c 2e 70 72 65 52 75 6e 3d 5b 6c 2e 70 72 65 52 75 6e 5d 29 3b 6c 2e 70 72 65 52 75 6e Data Ascii: received ${ot(r)} ${ot(e)}`),qe[0]!=1668509029&&Ae("Runtime error: The application has corrupted its heap memory area (address zero)!")}}var Yt=[],Xt=[],Zt=[],yt=!1;function er(){if(l.preRun)for(typeof l.preRun=="function"&&(l.preRun=[l.preRun]);l.preRun
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 6e 72 28 29 7b 69 66 28 4f 74 28 29 2c 6c 2e 70 6f 73 74 52 75 6e 29 66 6f 72 28 74 79 70 65 6f 66 20 6c 2e 70 6f 73 74 52 75 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6c 2e 70 6f 73 74 52 75 6e 3d 5b 6c 2e 70 6f 73 74 52 75 6e 5d 29 3b 6c 2e 70 6f 73 74 52 75 6e 2e 6c 65 6e 67 74 68 3b 29 69 72 28 6c 2e 70 6f 73 74 52 75 6e 2e 73 68 69 66 74 28 29 29 3b 50 74 28 5a 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 72 28 74 29 7b 59 74 2e 75 6e 73 68 69 66 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 74 29 7b 58 74 2e 75 6e 73 68 69 66 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 72 28 74 29 7b 5a 74 2e 75 6e 73 68 69 66 74 28 74 29 7d 73 65 28 4d 61 74 68 2e 69 6d 75 6c 2c 22 54 68 69 73 20 62 72 6f 77 73 65 72 20 64 6f 65 73 20 Data Ascii: unction nr(){if(Ot(),l.postRun)for(typeof l.postRun=="function"&&(l.postRun=[l.postRun]);l.postRun.length;)ir(l.postRun.shift());Pt(Zt)}function rr(t){Yt.unshift(t)}function sr(t){Xt.unshift(t)}function ir(t){Zt.unshift(t)}se(Math.imul,"This browser does
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 29 3b 76 61 72 20 73 3d 21 31 3b 72 65 74 75 72 6e 20 53 72 2e 66 6f 72 45 61 63 68 28 69 3d 3e 7b 73 7c 7c 69 2e 63 61 6e 48 61 6e 64 6c 65 28 65 29 26 26 28 69 2e 68 61 6e 64 6c 65 28 74 2c 65 2c 72 2c 6e 29 2c 73 3d 21 30 29 7d 29 2c 73 7d 2c 41 72 3d 28 74 2c 65 2c 72 2c 6e 2c 73 2c 69 2c 6d 2c 77 2c 50 2c 48 29 3d 3e 7b 76 61 72 20 4b 3d 65 3f 58 65 2e 72 65 73 6f 6c 76 65 28 68 65 2e 6a 6f 69 6e 32 28 74 2c 65 29 29 3a 74 2c 74 65 3d 6f 72 28 60 63 70 20 24 7b 4b 7d 60 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 66 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 48 3f 2e 28 29 2c 77 7c 7c 76 72 28 74 2c 65 2c 62 2c 6e 2c 73 2c 50 29 2c 69 3f 2e 28 29 2c 46 74 28 74 65 29 7d 78 72 28 66 2c 4b 2c 64 2c 28 29 3d 3e 7b 6d 3f 2e 28 29 2c 46 74 28 74 65 29 7d Data Ascii: );var s=!1;return Sr.forEach(i=>{s\|\|i.canHandle(e)&&(i.handle(t,e,r,n),s=!0)}),s},Ar=(t,e,r,n,s,i,m,w,P,H)=>{var K=e?Xe.resolve(he.join2(t,e)):t,te=or(`cp ${K}`);function I(f){function d(b){H?.(),w\|\|vr(t,e,b,n,s,P),i?.(),Ft(te)}xr(f,K,d,()=>{m?.(),Ft(te)}
2025-03-25 14:56:55 UTC	12288	IN	Data Raw: 6f 70 73 29 2c 47 65 2e 72 65 67 69 73 74 65 72 28 6f 2e 6d 61 6b 65 64 65 76 28 36 2c 30 29 2c 47 65 2e 64 65 66 61 75 6c 74 5f 74 74 79 31 5f 6f 70 73 29 2c 6f 2e 6d 6b 64 65 76 28 22 2f 64 65 76 2f 74 74 79 22 2c 6f 2e 6d 61 6b 65 64 65 76 28 35 2c 30 29 29 2c 6f 2e 6d 6b 64 65 76 28 22 2f 64 65 76 2f 74 74 79 31 22 2c 6f 2e 6d 61 6b 65 64 65 76 28 36 2c 30 29 29 3b 76 61 72 20 74 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 30 32 34 29 2c 65 3d 30 2c 72 3d 28 29 3d 3e 28 65 3d 3d 3d 30 26 26 28 65 3d 61 6e 28 74 29 2e 62 79 74 65 4c 65 6e 67 74 68 29 2c 74 5b 2d 2d 65 5d 29 3b 6f 2e 63 72 65 61 74 65 44 65 76 69 63 65 28 22 2f 64 65 76 22 2c 22 72 61 6e 64 6f 6d 22 2c 72 29 2c 6f 2e 63 72 65 61 74 65 44 65 76 69 63 65 28 22 2f 64 65 76 22 2c 22 Data Ascii: ops),Ge.register(o.makedev(6,0),Ge.default_tty1_ops),o.mkdev("/dev/tty",o.makedev(5,0)),o.mkdev("/dev/tty1",o.makedev(6,0));var t=new Uint8Array(1024),e=0,r=()=>(e===0&&(e=an(t).byteLength),t[--e]);o.createDevice("/dev","random",r),o.createDevice("/dev","
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 2c 65 2c 72 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 3d 66 65 2e 67 65 74 53 74 72 28 65 29 2c 65 3d 66 65 2e 63 61 6c 63 75 6c 61 74 65 41 74 28 74 2c 65 29 2c 72 3d 3d 3d 30 3f 6f 2e 75 6e 6c 69 6e 6b 28 65 29 3a 72 3d 3d 3d 35 31 32 3f 6f 2e 72 6d 64 69 72 28 65 29 3a 41 65 28 22 49 6e 76 61 6c 69 64 20 66 6c 61 67 73 20 70 61 73 73 65 64 20 74 6f 20 75 6e 6c 69 6e 6b 61 74 22 29 2c 30 7d 63 61 74 63 68 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 6f 3e 22 75 22 7c 7c 6e 2e 6e 61 6d 65 21 3d 3d 22 45 72 72 6e 6f 45 72 72 6f 72 22 29 74 68 72 6f 77 20 6e 3b 72 65 74 75 72 6e 2d 6e 2e 65 72 72 6e 6f 7d 7d 76 61 72 20 66 6e 3d 74 3d 3e 71 65 5b 74 3e 3e 32 5d 2b 6d 65 5b 74 2b 34 3e 3e 32 5d 2a 34 32 39 34 39 36 37 32 39 36 3b 66 75 6e 63 74 69 6f 6e 20 24 Data Ascii: ,e,r){try{return e=fe.getStr(e),e=fe.calculateAt(t,e),r===0?o.unlink(e):r===512?o.rmdir(e):Ae("Invalid flags passed to unlinkat"),0}catch(n){if(typeof o>"u"\|\|n.name!=="ErrnoError")throw n;return-n.errno}}var fn=t=>qe[t>>2]+me[t+4>>2]*4294967296;function $
2025-03-25 14:56:55 UTC	10463	IN	Data Raw: 69 74 65 33 63 68 61 6e 67 65 67 72 6f 75 70 5f 64 65 6c 65 74 65 22 2c 31 29 2c 6c 2e 5f 73 71 6c 69 74 65 33 63 68 61 6e 67 65 73 65 74 5f 63 6f 6e 63 61 74 3d 71 28 22 73 71 6c 69 74 65 33 63 68 61 6e 67 65 73 65 74 5f 63 6f 6e 63 61 74 22 2c 36 29 2c 6c 2e 5f 73 71 6c 69 74 65 33 63 68 61 6e 67 65 73 65 74 5f 63 6f 6e 63 61 74 5f 73 74 72 6d 3d 71 28 22 73 71 6c 69 74 65 33 63 68 61 6e 67 65 73 65 74 5f 63 6f 6e 63 61 74 5f 73 74 72 6d 22 2c 36 29 2c 6c 2e 5f 73 71 6c 69 74 65 33 73 65 73 73 69 6f 6e 5f 63 6f 6e 66 69 67 3d 71 28 22 73 71 6c 69 74 65 33 73 65 73 73 69 6f 6e 5f 63 6f 6e 66 69 67 22 2c 32 29 2c 6c 2e 5f 73 71 6c 69 74 65 33 5f 73 6f 75 72 63 65 69 64 3d 71 28 22 73 71 6c 69 74 65 33 5f 73 6f 75 72 63 65 69 64 22 2c 30 29 2c 6c 2e 5f 73 Data Ascii: ite3changegroup_delete",1),l._sqlite3changeset_concat=q("sqlite3changeset_concat",6),l._sqlite3changeset_concat_strm=q("sqlite3changeset_concat_strm",6),l._sqlite3session_config=q("sqlite3session_config",2),l._sqlite3_sourceid=q("sqlite3_sourceid",0),l._s
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 63 3e 3d 61 2e 5f 6d 69 6e 26 26 63 3c 3d 61 2e 5f 6d 61 78 7d 2c 64 3d 61 3d 3e 61 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 4b 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 42 59 54 45 53 5f 50 45 52 5f 45 4c 45 4d 45 4e 54 29 3f 61 3a 21 31 2c 62 3d 74 79 70 65 6f 66 20 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 3e 22 75 22 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 2c 53 3d 61 3d 3e 61 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 2c 68 3d 28 61 2c 63 2c 5f 29 3d 3e 53 28 61 29 3f 61 2e 73 6c 69 63 65 28 63 2c 5f 29 3a 61 2e 73 75 62 61 72 72 61 79 28 63 2c 5f 29 2c 52 3d 61 3d 3e 61 26 26 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7c 7c 61 20 Data Ascii: c>=a._min&&c<=a._max},d=a=>a&&a.constructor&&K(a.constructor.BYTES_PER_ELEMENT)?a:!1,b=typeof SharedArrayBuffer>"u"?function(){}:SharedArrayBuffer,S=a=>a.buffer instanceof b,h=(a,c,_)=>S(a)?a.slice(c,_):a.subarray(c,_),R=a=>a&&(a instanceof Uint8Array\|\|a
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 6e 28 67 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 5f 2e 72 78 4a 53 69 67 2e 65 78 65 63 28 67 29 3b 72 65 74 75 72 6e 20 61 3f 61 5b 32 5d 3a 67 2e 73 75 62 73 74 72 28 31 29 7d 2c 6c 65 74 74 65 72 54 79 70 65 3a 67 3d 3e 75 2e 5f 2e 73 69 67 54 79 70 65 73 5b 67 5d 7c 7c 72 28 22 49 6e 76 61 6c 69 64 20 73 69 67 6e 61 74 75 72 65 20 6c 65 74 74 65 72 3a 22 2c 67 29 2c 70 75 73 68 53 69 67 54 79 70 65 3a 28 67 2c 61 29 3d 3e 67 2e 70 75 73 68 28 75 2e 5f 2e 74 79 70 65 43 6f 64 65 73 5b 75 2e 5f 2e 6c 65 74 74 65 72 54 79 70 65 28 61 29 5d 29 7d 29 2c 74 79 70 65 6f 66 20 79 3d 3d 22 73 74 72 69 6e 67 22 29 7b 63 6f 6e 73 74 20 67 3d 78 3b 78 3d 79 2c 79 3d 67 7d 63 6f 6e 73 74 20 4d 3d 75 2e 5f 2e 73 69 67 50 61 72 61 6d 73 28 78 29 2c 70 3d 5b 31 2c 39 36 Data Ascii: n(g){const a=u._.rxJSig.exec(g);return a?a[2]:g.substr(1)},letterType:g=>u._.sigTypes[g]\|\|r("Invalid signature letter:",g),pushSigType:(g,a)=>g.push(u._.typeCodes[u._.letterType(a)])}),typeof y=="string"){const g=x;x=y,y=g}const M=u._.sigParams(x),p=[1,96
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 64 69 73 70 6f 73 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 74 72 79 7b 56 2e 6f 6e 64 69 73 70 6f 73 65 28 29 7d 63 61 74 63 68 28 58 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6f 6e 64 69 73 70 6f 73 65 28 29 20 66 6f 72 22 2c 4f 2e 73 74 72 75 63 74 4e 61 6d 65 2c 22 40 22 2c 24 2c 22 74 68 72 65 77 2e 20 4e 4f 54 20 70 72 6f 70 61 67 61 74 69 6e 67 20 69 74 2e 22 2c 58 29 7d 64 65 6c 65 74 65 20 56 2e 6f 6e 64 69 73 70 6f 73 65 2c 4f 2e 64 65 62 75 67 46 6c 61 67 73 2e 5f 5f 66 6c 61 67 73 2e 64 65 61 6c 6c 6f 63 26 26 50 28 22 64 65 62 75 67 2e 64 65 61 6c 6c 6f 63 3a 22 2c 56 5b 67 5d 3f 22 45 58 54 45 52 4e 41 4c 22 3a 22 22 2c 4f 2e 73 74 72 75 63 74 4e 61 6d 65 2c 22 69 6e 73 74 61 6e 63 65 3a 22 2c 4f 2e 73 74 72 75 Data Ascii: dispose instanceof Function)try{V.ondispose()}catch(X){console.warn("ondispose() for",O.structName,"@",$,"threw. NOT propagating it.",X)}delete V.ondispose,O.debugFlags.__flags.dealloc&&P("debug.dealloc:",V[g]?"EXTERNAL":"",O.structName,"instance:",O.stru

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:55 UTC	710	OUT	GET /assets/fonts/inter/Inter-Regular.ttf HTTP/1.1 Host: app.kortex.co Connection: keep-alive Origin: https://app.kortex.co sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://app.kortex.co/assets/index-C2qvVito.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=logs=1&id=59a83584-23ae-494b-a07b-95231b0966e5&created=1742914613197&expire=1742915513197
2025-03-25 14:56:55 UTC	700	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 310252 Connection: close Date: Tue, 25 Mar 2025 14:56:55 GMT Server: nginx Accept-Ranges: bytes Last-Modified: Fri, 21 Mar 2025 20:58:48 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 ETag: "sthrm06ne4" X-Cache: Miss from cloudfront Via: 1.1 686217785c5aa257660a5a0c173f7be8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: 1H7OrM82I4VqOoGv0P59kDNLhz-mK2uz03aIwbES6EuFXexpbuA3Gw==
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 33 31 ba 00 00 02 40 00 00 04 18 47 50 4f 53 17 dd 71 c3 00 01 7e 28 00 01 20 9a 47 53 55 42 4b 27 6c 53 00 00 5e f4 00 00 55 78 4f 53 2f 32 22 97 6e 62 00 00 01 e0 00 00 00 60 53 54 41 54 f1 81 d9 35 00 00 01 98 00 00 00 48 63 6d 61 70 f5 92 5b 83 00 01 19 0c 00 00 65 1a 67 61 73 70 00 00 00 10 00 00 01 14 00 00 00 08 67 6c 79 66 6e 19 78 c4 00 02 9e c4 00 02 1d 26 68 65 61 64 2d c3 61 46 00 00 01 60 00 00 00 36 68 68 65 61 1e f5 19 bf 00 00 01 3c 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 00 0f 58 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 00 37 24 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 00 01 1c 00 00 00 20 6e 61 6d 65 47 21 6c 93 00 00 06 58 00 00 09 00 70 6f 73 74 a7 a8 35 72 00 00 b4 6c 00 00 64 9e 70 72 65 Data Ascii: GDEF131@GPOSq~( GSUBK'lS^UxOS/2"nb`STAT5Hcmap[egaspglyfnx&head-aF`6hhea<$hmtxLX'loca]47$'maxp nameG!lXpost5rldpre
2025-03-25 14:56:55 UTC	7724	IN	Data Raw: 00 00 50 e1 00 00 50 f9 00 00 51 11 00 00 51 29 00 00 51 41 00 00 51 59 00 00 51 71 00 00 51 89 00 00 51 a1 00 00 52 1c 00 00 52 34 00 00 52 b7 00 00 53 59 00 00 53 71 00 00 53 89 00 00 53 a1 00 00 54 0e 00 00 54 8f 00 00 55 2b 00 00 55 cb 00 00 55 e3 00 00 55 fb 00 00 56 13 00 00 56 2b 00 00 56 43 00 00 56 63 00 00 56 73 00 00 56 83 00 00 56 ff 00 00 57 17 00 00 57 c9 00 00 58 7d 00 00 59 09 00 00 59 e0 00 00 59 f8 00 00 5a 10 00 00 5a 28 00 00 5a 40 00 00 5a 58 00 00 5a 70 00 00 5a 88 00 00 5b 28 00 00 5b 40 00 00 5c 2c 00 00 5d 08 00 00 5d 28 00 00 5d a0 00 00 5e 58 00 00 5e e4 00 00 5e fa 00 00 5f 12 00 00 5f 2a 00 00 5f 42 00 00 5f 5a 00 00 5f 72 00 00 5f 8a 00 00 5f a2 00 00 5f ba 00 00 5f d2 00 00 5f ea 00 00 60 02 00 00 60 1a 00 00 60 32 00 00 60 Data Ascii: PPQQ)QAQYQqQQRR4RSYSqSSTTU+UUUVV+VCVcVsVVWWX}YYYZZ(Z@ZXZpZ[([@\,]](]^X^^__*_B_Z_r_____```2`
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 00 02 0d 66 00 02 0e 1a 00 02 0e c5 00 02 0f f9 00 02 10 6e 00 02 10 de 00 02 11 61 00 02 11 a9 00 02 12 85 00 02 14 2a 00 02 14 59 00 02 14 f4 00 02 15 7c 00 02 15 d9 00 02 16 1f 00 02 16 4e 00 02 16 7d 00 02 16 8f 00 02 16 a1 00 02 16 ba 00 02 16 d4 00 02 16 ed 00 02 17 1b 00 02 17 49 00 02 17 88 00 02 17 d9 00 02 17 eb 00 02 17 fd 00 02 18 0f 00 02 18 b5 00 02 18 da 00 02 18 ea 00 02 19 02 00 02 19 4b 00 02 19 63 00 02 19 7d 00 02 19 f5 00 02 1a 6d 00 02 1a 9e 00 02 1a b6 00 02 1a c6 00 02 1b 58 00 02 1c 07 00 02 1c 5d 00 02 1c c8 00 02 1c e0 00 02 1c f6 00 02 1c f6 00 02 1d 0e 00 02 1d 26 00 01 00 00 00 0a 01 48 03 ba 00 02 44 46 4c 54 00 f6 6c 61 74 6e 00 0e 00 ec 00 03 43 41 54 20 00 a2 4d 4f 4c 20 00 5c 52 4f 4d 20 00 16 00 00 ff ff 00 20 00 00 00 Data Ascii: fna*Y\|N}IKc}mX]&HDFLTlatnCAT MOL \ROM
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 00 02 06 78 00 08 00 3c 00 36 00 30 00 2a 00 24 00 1e 00 18 00 12 03 80 00 02 08 62 03 7e 00 02 06 84 03 7f 00 02 06 8b 03 82 00 02 06 7d 03 7d 00 02 06 77 03 81 00 02 06 89 03 7b 00 02 06 88 03 7c 00 02 06 82 00 09 00 44 00 3e 00 38 00 32 00 2c 00 26 00 20 00 1a 00 14 03 6b 00 02 06 84 03 6c 00 02 06 8b 03 6a 00 02 06 77 03 67 00 02 06 81 03 68 00 02 06 88 03 6e 00 02 07 e8 03 69 00 02 06 82 03 6d 00 02 07 be 03 66 00 02 06 78 00 08 00 3c 00 36 00 30 00 2a 00 24 00 1e 00 18 00 12 03 55 00 02 08 62 03 52 00 02 06 84 03 53 00 02 06 8b 03 50 00 02 06 7b 03 4e 00 02 06 77 03 4f 00 02 06 82 03 51 00 02 06 7f 03 4d 00 02 06 78 00 02 00 0c 00 06 03 3f 00 02 06 84 03 3e 00 02 06 78 00 05 00 24 00 1e 00 18 00 12 00 0c 03 29 00 02 06 83 03 28 00 02 06 80 03 27 00 Data Ascii: x<60$b~}}w{\|D>82,& kljwghnimfx<60$UbRSP{NwOQMx?>x$)('
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 69 30 32 30 42 07 75 6e 69 31 45 43 39 07 75 6e 69 31 45 43 42 07 75 6e 69 45 30 34 44 07 75 6e 69 30 32 33 37 07 75 6e 69 30 32 35 46 07 75 6e 69 30 32 34 39 07 75 6e 69 45 30 34 45 07 75 6e 69 30 34 35 36 07 75 6e 69 30 34 35 37 07 75 6e 69 30 31 33 33 07 75 6e 69 30 30 36 41 07 75 6e 69 45 30 34 46 07 75 6e 69 30 32 39 44 07 75 6e 69 30 31 33 35 07 75 6e 69 30 31 46 30 07 75 6e 69 30 33 46 33 07 75 6e 69 30 34 35 38 07 75 6e 69 30 31 43 39 07 75 6e 69 30 30 36 42 07 75 6e 69 30 31 39 39 07 75 6e 69 30 31 33 37 07 75 6e 69 30 31 45 39 07 75 6e 69 31 45 33 31 07 75 6e 69 31 45 33 33 07 75 6e 69 31 45 33 35 07 75 6e 69 30 32 39 45 07 75 6e 69 30 30 36 43 07 75 6e 69 30 31 34 32 07 75 6e 69 30 31 39 41 07 75 6e 69 30 32 36 42 07 75 6e 69 30 32 36 44 07 75 Data Ascii: i020Buni1EC9uni1ECBuniE04Duni0237uni025Funi0249uniE04Euni0456uni0457uni0133uni006AuniE04Funi029Duni0135uni01F0uni03F3uni0458uni01C9uni006Buni0199uni0137uni01E9uni1E31uni1E33uni1E35uni029Euni006Cuni0142uni019Auni026Buni026Du
2025-03-25 14:56:56 UTC	6784	IN	Data Raw: 00 00 00 b4 00 00 00 b4 00 00 06 64 00 00 00 b5 00 00 00 b5 00 00 03 87 00 00 00 b6 00 00 00 b6 00 00 05 be 00 00 00 b7 00 00 00 b7 00 00 05 87 00 00 00 b8 00 00 00 b8 00 00 06 75 00 00 00 b9 00 00 00 b9 00 00 05 e4 00 00 00 ba 00 00 00 ba 00 00 05 bb 00 00 00 bb 00 00 00 bb 00 00 05 8d 00 00 00 bc 00 00 00 bc 00 00 06 54 00 00 00 bd 00 00 00 bd 00 00 06 52 00 00 00 be 00 00 00 be 00 00 06 55 00 00 00 bf 00 00 00 bf 00 00 05 38 00 00 00 c0 00 00 00 c2 00 00 00 05 00 00 00 c3 00 00 00 c3 00 00 00 04 00 00 00 c4 00 00 00 c4 00 00 00 03 00 00 00 c5 00 00 00 c5 00 00 00 08 00 00 00 c6 00 00 00 c6 00 00 00 3d 00 00 00 c7 00 00 00 c7 00 00 00 4b 00 00 00 c8 00 00 00 cb 00 00 00 60 00 00 00 cc 00 00 00 ce 00 00 00 ca 00 00 00 cf 00 00 00 cf 00 00 00 c6 00 00 00 Data Ascii: duTRU8=K`
2025-03-25 14:56:56 UTC	3888	IN	Data Raw: 00 00 03 27 00 00 06 88 00 00 03 28 00 00 03 28 00 00 06 87 00 00 03 29 00 00 03 29 00 00 08 56 00 00 03 2a 00 00 03 2a 00 00 07 e3 00 00 03 2b 00 00 03 2b 00 00 07 ce 00 00 03 2c 00 00 03 2c 00 00 07 e7 00 00 03 2d 00 00 03 2e 00 00 06 89 00 00 03 2f 00 00 03 2f 00 00 07 e0 00 00 03 30 00 00 03 30 00 00 06 90 00 00 03 31 00 00 03 31 00 00 08 62 00 00 03 32 00 00 03 32 00 00 06 8f 00 00 03 33 00 00 03 33 00 00 08 d2 00 00 03 34 00 00 03 34 00 00 08 c3 00 00 03 35 00 00 03 35 00 00 07 da 00 00 03 36 00 00 03 36 00 00 07 d9 00 00 03 37 00 00 03 37 00 00 08 ad 00 00 03 38 00 00 03 38 00 00 08 ac 00 00 03 39 00 00 03 39 00 00 08 90 00 00 03 3a 00 00 03 3a 00 00 07 e2 00 00 03 3b 00 00 03 3b 00 00 08 af 00 00 03 3c 00 00 03 3c 00 00 08 a8 00 00 03 3d 00 00 03 Data Ascii: '(())V**++,,-.//0011b2233445566778899::;;<<=
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 00 00 04 dc 00 00 07 bc 00 00 04 dd 00 00 04 dd 00 00 09 f2 00 00 04 de 00 00 04 de 00 00 07 ba 00 00 04 df 00 00 04 df 00 00 09 ef 00 00 04 e0 00 00 04 e0 00 00 04 22 00 00 04 e1 00 00 04 e1 00 00 04 ec 00 00 04 e2 00 00 04 e2 00 00 01 3a 00 00 04 e3 00 00 04 e3 00 00 08 44 00 00 04 e4 00 00 04 e4 00 00 01 3b 00 00 04 e5 00 00 04 e5 00 00 08 42 00 00 04 e6 00 00 04 e6 00 00 01 71 00 00 04 e7 00 00 04 e7 00 00 03 38 00 00 04 e8 00 00 04 e8 00 00 01 73 00 00 04 e9 00 00 04 e9 00 00 08 6a 00 00 04 ea 00 00 04 ea 00 00 01 74 00 00 04 eb 00 00 04 eb 00 00 08 6b 00 00 04 ec 00 00 04 ed 00 00 09 38 00 00 04 ee 00 00 04 ee 00 00 03 c9 00 00 04 ef 00 00 04 ef 00 00 03 c5 00 00 04 f0 00 00 04 f0 00 00 03 ca 00 00 04 f1 00 00 04 f1 00 00 03 c6 00 00 04 f2 00 00 04 Data Ascii: ":D;Bq8sjtk8
2025-03-25 14:56:56 UTC	4880	IN	Data Raw: 27 14 00 00 23 0c 27 c8 00 00 27 0e 27 14 00 00 1f e8 1f ee 00 00 27 0e 27 14 00 00 1f f4 1f fa 00 00 27 32 20 00 00 00 20 06 22 46 00 00 20 0c 20 12 00 00 20 18 20 1e 00 00 20 24 20 2a 00 00 20 30 20 36 00 00 20 54 21 bc 00 00 27 0e 27 14 00 00 27 0e 27 14 00 00 24 ce 24 c8 00 00 22 40 27 50 00 00 27 0e 27 14 00 00 27 0e 20 3c 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 42 00 00 20 ba 20 48 00 00 20 ba 20 b4 00 00 20 ba 20 c0 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 ba 20 b4 00 00 20 4e 24 bc 00 00 20 54 21 bc 00 00 20 5a 20 60 00 00 20 66 20 6c 00 00 20 72 20 78 00 00 20 7e 25 4c 00 Data Ascii: '#''''''2 "F $ * 0 6 T!''''$$"@'P''' < B H N$ T! Z ` f l r x ~%L
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 27 92 27 98 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 24 7a 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 b6 00 00 00 00 27 98 00 00 00 00 27 98 00 00 00 00 27 98 00 00 00 00 27 98 00 00 00 00 27 bc 00 00 00 00 27 bc 00 00 00 00 26 d8 00 00 00 00 27 bc 00 00 00 Data Ascii: '''''''''''''''''''''''''''''''''''$z''''''''''''''''''''&'

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:55 UTC	757	OUT	GET /assets/icons/image.png HTTP/1.1 Host: app.kortex.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=logs=1&id=59a83584-23ae-494b-a07b-95231b0966e5&created=1742914613197&expire=1742915513197
2025-03-25 14:56:55 UTC	713	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1347321 Connection: close Date: Tue, 25 Mar 2025 09:52:41 GMT Server: nginx Accept-Ranges: bytes ETag: "sthrm0svll" Last-Modified: Fri, 21 Mar 2025 20:58:48 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 X-Cache: Hit from cloudfront Via: 1.1 13d659985661cdf8f3c57901ab225276.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: vd_KsyTmdl8v24H8Lxabz0io4wgQF2YRuUWCD9q3KE9c0TqVhKD6Yg== Age: 18254
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 80 00 00 05 80 08 06 00 00 00 e0 51 e2 2e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 05 80 a0 03 00 04 00 00 00 01 00 00 05 80 00 00 00 00 fc b9 f4 23 00 00 40 00 49 44 41 54 78 01 ec bd 5b af 75 d7 71 25 b6 cf a1 2c 0b 41 f3 02 58 52 c3 96 d4 4d cb 4a fb 12 74 4c 24 e9 5c 9e c4 d7 20 08 2c 3e b4 1a 8a 91 58 f9 05 f6 3f 30 f4 13 fc 0f ac 04 81 81 f8 41 f6 43 d0 af f4 63 80 20 61 a7 63 bb bb 61 4b 9f db 94 94 58 32 40 51 46 37 49 91 e7 4b 8d 51 35 6a 8e 39 f7 dc fb 9c 8f a4 ad cb b7 96 e5 35 6b 56 8d 31 aa 66 ad cb 5e 7b f1 70 f3 e6 Data Ascii: PNGIHDRQ.sRGBDeXIfMM*i#@IDATx[uq%,AXRMJtL$\ ,>X?0ACc acaKX2@QF7IKQ5j95kV1f^{p
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: 02 74 19 9b f4 60 8f 1e 61 a6 4d 6b 9a d7 90 51 e9 e7 6c 2d 24 d4 cb c5 c3 11 20 21 a4 cd fa 35 a9 d1 35 85 77 9c c7 45 dd e1 14 73 bc e3 14 97 4f 73 c7 cb 87 46 0a d7 c7 3b 82 e9 03 43 d1 62 b4 2b bb b6 44 87 2c 74 2b 08 0a 36 1d 11 93 88 73 ac 67 09 22 2e cd 3c 6a e7 19 d2 93 3c 6a af 12 71 50 d6 dc 50 ec e3 4d 12 3c 61 08 08 bb b7 cc a0 db 86 f7 45 30 d1 ae d7 38 ce 53 f2 b4 14 9d 34 e8 ad 7c 12 a1 5c 26 4e 00 00 40 00 49 44 41 54 8e 64 d2 46 39 be b4 ae d0 ef 01 c6 9f eb cd 00 f7 81 d7 cf e6 58 45 c3 ec 84 9d a1 3a 11 ec c9 65 13 71 b4 16 9f cb 36 b2 ca f4 d2 bb dd 6d d4 11 42 bd f2 35 31 1c d2 55 4e 60 3c 4e 8e 39 64 0a d4 a2 00 62 d2 80 9c bb be 87 08 0f 07 7d c1 9b 74 10 5c 36 e9 c0 7d b1 d6 4a d0 07 6d d1 00 35 fe 7f 2d a3 1d 5e 83 40 e6 bb c6 45 Data Ascii: t`aMkQl-$ !55wEsOsF;Cb+D,t+6sg".<j<jqPPM<aE08S4\|\&N@IDATdF9XE:eq6mB51UN`<N9db}t\6}Jm5-^@E
2025-03-25 14:56:55 UTC	16384	IN	Data Raw: fc 93 fc 1d c1 3f c0 9f 08 66 f4 0a 61 d9 72 23 d5 8b 0f bd f5 85 87 af c6 ef 08 7e e7 fe 13 c1 c7 69 be 3b bf 2b 66 60 ee 92 ef 8a e1 dc 07 71 9f 81 9c 01 7c f1 fb f0 e5 3f fa f1 78 b2 fc 44 6c e8 1f c1 0b c1 7c a1 63 0f f8 08 ea 1d e1 cb fc 55 0f bf 92 5f fc fa 9d 81 07 42 f5 fb c5 b1 9f 16 91 4f 4f 2c a6 6e e0 3c 0c 9f 71 51 28 11 54 c8 2a b5 ea ba d0 05 e8 40 15 43 f2 25 98 28 88 75 48 af 20 15 42 53 12 c0 08 26 d7 52 14 29 4c 94 38 7d fe 12 00 00 40 00 49 44 41 54 e4 3e bb cf ed 06 b4 d1 fa 0d 6b 63 a9 a3 09 b7 0c d2 8c 2b 1c 5c 38 94 88 9d 72 f6 db 8e c5 39 37 0b 78 bd 10 e4 c7 a9 2f 48 60 05 ef 5c 55 47 35 14 a0 2d a0 44 aa 15 cf dd 5a 04 ed 0b 50 7e 22 6c 4f 16 66 dd 2e a4 7c 95 bf 9a 81 2f 65 f0 15 9c 84 25 a5 6a 12 d6 45 7a de c2 a9 9b a1 17 0d Data Ascii: ?far#~i;+f`q\|?xDl\|cU_BOO,n<qQ(T*@C%(uH BS&R)L8}@IDAT>kc+\8r97x/H`\UG5-DZP~"lOf.\|/e%jEz
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 02 35 6f d9 a9 9a 02 20 6c 18 30 e7 c5 30 7a 1d ab 54 5b 43 c9 c0 cc 47 5e 08 80 a7 c4 67 01 7a 01 21 b7 e0 05 25 13 65 a9 5f 38 a4 2e d7 32 9d 8d 03 e0 72 50 2d bc 62 5e 00 17 87 23 c5 de 41 c2 9c e2 88 9d fc d2 10 57 7d 60 e5 13 cf fb 6e 8b 73 f2 29 f6 54 2b ee 8e 53 6e f8 85 71 9f f0 88 a5 ff 84 32 5f 99 b9 46 ea 0b a1 c3 fd 28 86 f4 d1 2a ef 12 8b 0e fd 87 6f 22 72 e5 0e d3 f9 7d 3f 45 ee 45 af 13 56 6d d5 d7 07 b2 0e 87 98 52 e6 fd 0c 07 e6 28 d5 f2 43 4d a3 69 20 89 66 aa 4b 00 00 40 00 49 44 41 54 ff 9e 0b 3e 1c a9 01 4b 1f 86 60 d7 51 a4 c1 86 3f ea f6 31 10 09 1c 41 a1 d6 9c 1a 5f f9 53 11 1d af 64 ee 54 d5 5f 83 29 b8 b0 c1 6b 53 46 42 78 2e d7 a8 87 d5 93 04 6f 1c d5 b4 10 39 c9 c0 32 18 55 ef 8c b7 35 e4 6a bd 88 c8 d7 20 e5 8b 80 62 5c 6b ea Data Ascii: 5o l00zT[CG^gz!%e_8.2rP-b^#AW}`ns)T+Snq2_F(*o"r}?EEVmR(CMi fK@IDAT>K`Q?1A_SdT_)kSFBx.o92U5j b\k
2025-03-25 14:56:56 UTC	15304	IN	Data Raw: 4f 13 dd 73 67 3e c0 ae 79 6d fc 53 5a 81 71 13 e8 4f d1 a8 36 32 d7 77 93 a3 19 7f bb 76 69 19 83 23 6f ba d2 33 e9 9f c4 52 c2 a7 56 37 be 04 b7 ac c4 d1 99 dc a8 2f 8f 18 5f 95 5b cf ce 61 6c 80 d1 c6 0b f9 3d 51 e3 96 2a 08 2a 9e 35 a6 0b db c7 6c 7f f7 03 08 4c 3e 96 9f bd 90 ca d3 83 38 f0 30 69 fb d1 56 39 d5 80 53 60 d2 f2 a3 13 b0 c8 eb 9e 98 6f 00 27 8e b4 0a 68 d9 01 b9 65 52 fc 7d 0d c8 91 03 cc 7b c5 5f 09 f1 db 7f db fb 2f 5f f8 85 5f c0 9e de 11 0d bd 11 cd ad 77 ce 73 f8 26 cf 07 5e fc 83 6c 9c f4 5b 00 00 40 00 49 44 41 54 f7 7f 1c 0e eb f7 2c bd ee ff 08 dc b3 74 b5 63 ae df f4 91 6f ff 86 37 5e c7 37 7f 9f fb 7c 6e 1f da c5 6c bb f9 97 3f f3 c9 cb c7 bf fb 13 97 9f fd bf ff 9f 5c 1d ed 28 be 23 09 3b ac 1f 48 5b f2 51 3a 37 32 0f 69 b9 Data Ascii: Osg>ymSZqO62wvi#o3RV7/_[al=Q**5lL>80iV9S`o'heR}{_/__ws&^l[@IDAT,tco7^7\|nl?\(#;H[Q:72i
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 56 fe a9 f1 7c ff 8f 62 77 5d bb 19 de bd ed 38 f3 13 f5 dc da 07 32 9e cd 19 91 15 8e c4 70 99 62 23 c2 8c bc 41 ea 57 a3 ca 25 6d fd 6c 6a 97 0e a6 3d 87 c6 a3 50 0c f1 d2 0f bb a7 b5 00 a3 ef 62 8d 59 44 73 64 96 e7 21 56 3a 00 60 17 7c d4 a8 ca b4 16 68 5c 41 c3 9e 24 ba 5a 3a 5b 9e 3d c3 d3 9a da 23 52 57 df ce 5a 30 1e 0d 02 12 ac 4d da 30 f6 a4 02 e2 86 4c 74 ea 5b 23 62 57 20 d1 64 96 b0 f0 42 30 c0 42 53 64 58 b9 7b 14 e0 cc 9d 08 8e a9 6d c7 50 61 9b 8b 96 89 2d 99 1d 5d 45 8d ef 01 f4 f7 3c 92 eb d7 c3 ae 16 e3 45 1e e7 bc d7 dd fb 88 39 ae bd e5 fa 53 75 e3 22 ec c3 f0 c6 4e c1 ec 20 b3 ed d1 41 ec c8 c4 72 38 b6 a2 a4 46 27 b5 05 82 7c e5 39 ee 4d e6 b6 3e c0 11 94 c4 de b6 53 3f 59 52 82 6a 80 be 6a c6 c7 e0 45 0e 75 59 7b e1 55 ce e9 11 67 Data Ascii: V\|bw]82pb#AW%mlj=PbYDsd!V:`\|h\A$Z:[=#RWZ0M0Lt[#bW dB0BSdX{mPa-]E<E9Su"N Ar8F'\|9M>S?YRjjEuY{Ug
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: fc 5e 18 bf 51 1e df 1a cb 6f 13 d7 0f 13 63 d5 cf 9f 3d fb f0 ff f4 97 ff 97 37 ff 9d dd 80 af f1 c2 de f3 35 ae ff ef 64 f9 ef fd fe 37 bf 27 7e e5 f7 bf af ab 99 6b ec 9f 04 c5 45 fe c9 4f fd fa ed d7 7e e3 1f c4 b7 81 e7 42 cf 9f a9 d8 4f 50 29 d6 4f 43 6a 9b f2 ee a8 6f 26 83 8b 9f c3 d4 5d 53 54 51 7c 63 f1 2d 67 3f f2 a7 37 e3 ed f9 5d 8f 9c b0 e1 8d 76 72 e1 1a 13 ae 33 c6 d4 a1 52 74 08 1c 2e fd 93 a1 ec 86 18 70 be 74 9e 4e 91 d1 21 96 8f ea cd 79 e2 df 1b a5 9f b5 64 5d e1 3e ba c7 f4 9a e8 8b 6a ba 8f b8 1a 57 5f 9f 65 2f de db 9a 9d 5e 07 0f 36 37 7e 90 35 ca ab 64 6a 4f b4 f3 72 ae 95 82 97 9d 00 c1 4c 2f f0 74 3d 2f bd d6 8f 2c 93 0d 35 b2 55 af 06 68 75 c8 17 f3 f6 76 43 6a 5c 58 7e 01 25 9a 6b c3 2c 65 c5 c5 4f 22 11 2e d7 5b e5 54 2c 14 Data Ascii: ^Qoc=75d7'~kEO~BOP)OCjo&]STQ\|c-g?7]vr3Rt.ptN!yd]>jW_e/^67~5djOrL/t=/,5UhuvCj\X~%k,eO".[T,
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: e9 b9 ef 81 51 99 e2 69 31 12 27 7e 4f 97 f7 d0 e0 99 85 73 f6 b4 e7 b6 1f 94 e4 02 99 ac 8e 97 31 91 61 3b df 51 a6 58 3f d2 52 27 e0 fa 8a e8 2a 02 1d 7b 2c e5 df 1e 2f d5 6f 53 59 db c3 99 9b d7 cf bf 01 9f b3 cb 5e 9d 3f cf c7 05 bd d5 ee bb 6b 6d 91 84 e3 b2 eb 92 96 70 0c 9f ff c2 17 9f de 7a ab be 0f 17 6f 4e fc 25 8b c8 e4 7b d1 cb a7 0f 05 f0 b3 f8 5e de 45 fc 01 70 05 1e df 00 be b1 11 de 79 fd db 7e 26 36 d1 1b dc 84 fc d4 53 db 31 06 fc bd bf 9f fd dc e7 2d d3 6f de 82 b9 47 83 1c 23 32 f1 ca db 2a c7 f4 27 02 14 65 56 e4 a0 0b 62 1c 75 0b a4 73 e3 2c 2d 8c d7 e3 8c ee bc 13 cb 31 f5 e1 98 34 80 e9 25 6c 1f 3d ef c4 75 4c b5 6e 6a f0 3a d5 da b8 70 25 0c 24 55 3e 26 76 39 eb d9 32 c2 cc 6d 30 d8 9e b8 47 f2 a1 95 28 ce f9 58 12 eb 3a 1b be 31 Data Ascii: Qi1'~Os1a;QX?R'{,/oSY^?kmpzoN%{^Epy~&6S1-oG#2'eVbus,-14%l=uLnj:p%$U>&v92m0G(X:1
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: f3 04 10 c1 11 0b 3f 1c 6d 46 05 18 97 48 92 b1 af 13 81 af 18 f4 e2 48 4a 19 16 a3 e9 fc 22 ee 50 a7 84 41 4a f1 28 be 9e 3c d2 69 dd cf 0d 61 f5 d1 c9 ca ec 3b 80 45 84 ee f3 c3 5f 01 f1 5d ff f9 5f 7f fa e0 07 bf 2d 9b a1 0e d8 12 7c df 7b e2 af 82 78 4f fc 06 f0 8b 6f bc f6 31 7e b7 5f d7 d6 f6 df e7 3e ff 85 67 be f9 6b e4 87 f9 58 81 c7 0a 3c 56 e0 b1 02 8f 15 78 ac c0 63 05 1e 2b f0 58 81 c7 0a 3c 56 e0 b1 02 8f 15 78 ac c0 63 05 1e 2b f0 58 81 c7 0a fc b9 58 01 fc 55 10 9f fe f4 67 9e 5e c6 df 02 80 ef 0d e6 b7 06 e7 1b 84 2f 5f 7b e7 3d f1 57 41 bc ff cf c5 d5 fa 53 34 f9 df fd c8 8f 7f 24 be ab ff 86 7e 3b 80 97 18 a7 78 fd de 3f fd a7 4f bf fb 7b f3 57 3f a0 8c 7e 02 d9 25 c1 e5 8f 11 f4 73 70 44 f0 13 2d 1d 69 35 0d d1 f8 69 8e 7e a0 83 28 5e Data Ascii: ?mFHHJ"PAJ(<ia;E_]_-\|{xOo1~_>gkX<Vxc+X<Vxc+XXUg^/_{=WAS4$~;x?O{W?~%spD-i5i~(^
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 88 35 29 00 b7 41 cc b7 b4 ce e5 c3 1d 70 f0 f0 fa 97 75 74 6f d0 bc d1 75 b8 f9 4f 34 f0 14 cf e6 e0 f2 4f a8 32 ec 7c b7 11 ac 55 7b 8e cc 41 cb d5 60 a7 af a9 0c f2 b4 fc 6d 1f 12 49 e9 ea 57 e0 55 77 8d dc 77 32 db a2 84 25 b5 b9 82 67 9c b7 d9 a9 25 eb 9a 3c 97 cd 38 66 3e be 3f 87 c8 37 9e 11 cb 3d 1d e1 84 9c e7 9d 8e dd 16 72 c2 59 5e 5c 8c 04 81 f3 66 0b 23 57 2f 0c d8 08 e0 a5 c1 fc eb bd 99 3c 9c 75 05 96 dc 0a 8f 44 0a fb f4 f6 9a 4c 09 5a eb 05 90 59 23 d6 b1 12 ae 61 e5 15 fd 0c 2a 38 eb 33 48 58 d2 7d 54 b8 32 c0 f1 a3 9b 33 70 c7 f6 1c a3 4e bf 8f 90 1e 09 b5 d4 5e b3 03 bf ac 71 53 0c f0 29 74 c2 bc 64 c7 db f0 e8 33 ed 53 2e 30 bd 52 26 59 5a 08 8d 15 5b 24 32 6f a0 b1 d6 39 6e 1a 16 4c 85 bd fd 95 cf e8 06 f9 f3 f0 56 23 02 d3 d1 58 53 Data Ascii: 5)AputouO4O2\|U{A`mIWUww2%g%<8f>?7=rY^\f#W/<uDLZY#a*83HX}T23pN^qS)td3S.0R&YZ[$2o9nLV#XS

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:55 UTC	828	OUT	GET /api/documents/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd HTTP/1.1 Host: app.kortex.co Connection: keep-alive x-request-id: e2b17ab0-84dd-4b1f-a80b-6f12b9b81599 sec-ch-ua-platform: "Windows" x-correlation-id: no-session-id User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" x-server-select: api sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=logs=1&id=59a83584-23ae-494b-a07b-95231b0966e5&created=1742914613197&expire=1742915513197
2025-03-25 14:56:56 UTC	837	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Tue, 25 Mar 2025 14:56:56 GMT Server: nginx location: /api/documents/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd/ vary: Cookie, origin x-content-type-options: nosniff referrer-policy: same-origin cross-origin-opener-policy: same-origin Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 X-Cache: Miss from cloudfront Via: 1.1 a7c9fe7eb79f698774d5b4dbc632cf68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: L7u061DcZiJ2cH3Lgdvq2_MpL1NK90wE238l3P6swXftcB7-vAcLGg==
2025-03-25 14:56:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:55 UTC	796	OUT	GET /api/stripe/manage/ HTTP/1.1 Host: app.kortex.co Connection: keep-alive x-request-id: 604b7163-ed6a-499b-8c41-8fb8f61b7224 sec-ch-ua-platform: "Windows" x-correlation-id: no-session-id User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" x-server-select: api sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=logs=1&id=59a83584-23ae-494b-a07b-95231b0966e5&created=1742914613197&expire=1742915513197
2025-03-25 14:56:55 UTC	855	IN	HTTP/1.1 401 Unauthorized Content-Type: application/json Content-Length: 58 Connection: close Date: Tue, 25 Mar 2025 14:56:55 GMT Server: nginx www-authenticate: Bearer realm="api" vary: Accept, Cookie, origin allow: GET, POST, HEAD, OPTIONS x-frame-options: DENY x-content-type-options: nosniff referrer-policy: same-origin cross-origin-opener-policy: same-origin Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 X-Cache: Error from cloudfront Via: 1.1 f7b469bae3f4a6418a1a6a50a32d318c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: AGs6bY0oxsWbt4PyCEvJvEC84BjINERO3Rti2IzDzhCAFRqbY6r9dw==
2025-03-25 14:56:55 UTC	58	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 20 77 65 72 65 20 6e 6f 74 20 70 72 6f 76 69 64 65 64 2e 22 7d Data Ascii: {"detail":"Authentication credentials were not provided."}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:56 UTC	543	OUT	GET /assets/lib/sqlite3.wasm HTTP/1.1 Host: app.kortex.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app.kortex.co/assets/sqlite3Worker-DnFqcIer.js Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=logs=1&id=59a83584-23ae-494b-a07b-95231b0966e5&created=1742914613197&expire=1742915513197
2025-03-25 14:56:56 UTC	721	IN	HTTP/1.1 200 OK Content-Type: application/wasm Content-Length: 3588423 Connection: close Date: Tue, 25 Mar 2025 07:45:03 GMT Server: nginx Accept-Ranges: bytes Last-Modified: Fri, 21 Mar 2025 20:58:48 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 ETag: "sthrm024wuf" X-Cache: Hit from cloudfront Via: 1.1 3087aea10f3b11e0dd724415f9afc740.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: KrhbMfxbZTW8_4T0wEO1qEYxl-a60Kq28f0QsH3KExFYGJspnt5LFQ== Age: 25913
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 00 61 73 6d 01 00 00 00 01 d3 07 78 60 01 7f 01 7f 60 01 7f 00 60 02 7f 7f 01 7f 60 03 7f 7f 7f 00 60 03 7f 7f 7f 01 7f 60 00 01 7f 60 04 7f 7f 7f 7f 01 7f 60 02 7f 7f 00 60 04 7f 7f 7f 7e 01 7f 60 02 7f 7e 01 7f 60 05 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7e 00 60 07 7f 7f 7f 7f 7f 7e 7e 00 60 00 00 60 06 7f 7f 7f 7f 7f 7e 01 7f 60 04 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 01 7f 60 01 7c 01 7c 60 02 7c 7c 01 7c 60 05 7f 7f 7f 7f 7f 00 60 01 7e 01 7f 60 04 7f 7e 7f 7f 00 60 03 7f 7e 7e 01 7f 60 03 7f 7e 7f 01 7e 60 06 7f 7c 7f 7f 7f 7f 01 7f 60 00 01 7c 60 04 7f 7e 7f 7f 01 7f 60 02 7e 7f 00 60 07 7f 7f 7f 7f 7e 7f 7f 01 7f 60 03 7f 7e 7f 01 7f 60 01 7f 01 7e 60 01 7e 01 7e 60 00 01 7e 60 01 7f 01 7c 60 04 7f 7c 7f 7f 00 60 03 7f 7c 7c 00 60 03 7f 7f 7e Data Ascii: asmx`````````~`~``~`~~``~```\|\|`\|\|\|``~`~`~~`~~`\|`\|`~`~`~`~`~`~~`~`\|`\|`\|\|`~
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 28 02 34 21 77 41 00 21 78 20 77 20 78 47 21 79 41 01 21 7a 20 79 20 7a 71 21 7b 02 40 20 7b 45 0d 00 20 07 28 02 34 21 7c 20 7c 10 ae 80 80 80 00 21 7d 20 07 20 7d 36 02 30 20 07 28 02 30 21 7e 20 7e 10 af 80 80 80 00 21 7f 20 07 20 7f 36 02 2c 20 07 28 02 54 21 80 01 41 0b 21 81 01 20 80 01 20 81 01 46 21 82 01 41 01 21 83 01 20 82 01 20 83 01 71 21 84 01 02 40 20 84 01 45 0d 00 20 07 28 02 2c 21 85 01 41 01 21 86 01 20 85 01 20 86 01 6d 21 87 01 20 07 20 87 01 36 02 2c 0b 20 07 28 02 2c 21 88 01 20 07 28 02 3c 21 89 01 20 89 01 20 88 01 6a 21 8a 01 20 07 20 8a 01 36 02 3c 0b 20 07 28 02 38 21 8b 01 41 01 21 8c 01 20 8b 01 20 8c 01 6a 21 8d 01 20 07 20 8d 01 36 02 38 0c 00 0b 0b 20 07 28 02 3c 21 8e 01 20 07 28 02 50 21 8f 01 20 8f 01 20 8e 01 36 02 00 Data Ascii: (4!wA!x w xG!yA!z y zq!{@ {E (4!\| \|!} }60 (0!~ ~! 6, (T!A! F!A! q!@ E (,!A! m! 6, (,! (<! j! 6< (8!A! j! 68 (<! (P! 6
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 02 0c 20 04 20 01 36 02 08 20 04 28 02 08 21 05 20 04 28 02 0c 21 06 41 b0 aa 88 80 00 21 07 23 83 80 80 80 00 21 08 20 08 20 07 6a 21 09 41 02 21 0a 20 06 20 0a 74 21 0b 20 09 20 0b 6a 21 0c 20 0c 28 02 00 21 0d 20 0d 20 05 6b 21 0e 20 0c 20 0e 36 02 00 0f 0b c8 01 03 0e 7f 01 7e 04 7f 23 80 80 80 80 00 21 02 41 10 21 03 20 02 20 03 6b 21 04 20 04 24 80 80 80 80 00 20 04 20 00 36 02 08 20 04 20 01 36 02 04 10 c2 80 80 80 00 21 05 02 40 02 40 20 05 45 0d 00 41 00 21 06 20 04 20 06 36 02 0c 0c 01 0b 20 04 28 02 04 21 07 41 00 21 08 20 07 20 08 48 21 09 41 01 21 0a 20 09 20 0a 71 21 0b 02 40 20 0b 45 0d 00 41 00 21 0c 20 04 20 0c 36 02 04 0b 20 04 28 02 08 21 0d 20 04 28 02 04 21 0e 20 0e 21 0f 20 0f ac 21 10 20 0d 20 10 10 d9 80 80 80 00 21 11 20 04 20 11 Data Ascii: 6 (! (!A!#! j!A! t! j! (! k! 6~#!A! k! $ 6 6!@@ EA! 6 (!A! H!A! q!@ EA! 6 (! (! ! ! !
2025-03-25 14:56:56 UTC	15296	IN	Data Raw: 0b 0b 20 05 2d 00 f1 02 21 c0 0a 41 18 21 c1 0a 20 c0 0a 20 c1 0a 74 21 c2 0a 20 c2 0a 20 c1 0a 75 21 c3 0a 41 00 21 c4 0a 20 c3 0a 20 c4 0a 47 21 c5 0a 41 01 21 c6 0a 20 c5 0a 20 c6 0a 71 21 c7 0a 20 05 20 c7 0a 36 02 7c 02 40 03 40 20 05 28 02 78 21 c8 0a 41 7f 21 c9 0a 20 c8 0a 20 c9 0a 6a 21 ca 0a 20 05 20 ca 0a 36 02 78 20 c8 0a 45 0d 01 20 05 28 02 8c 03 21 cb 0a 20 05 28 02 7c 21 cc 0a 41 01 21 cd 0a 20 cc 0a 20 cd 0a 6a 21 ce 0a 20 05 20 ce 0a 36 02 7c 20 cb 0a 20 cc 0a 6a 21 cf 0a 41 30 21 d0 0a 20 cf 0a 20 d0 0a 3a 00 00 0c 00 0b 0b 20 05 28 02 fc 02 21 d1 0a 20 05 20 d1 0a 36 02 84 03 0b 0c 0a 0b 20 05 2d 00 f2 02 21 d2 0a 41 00 21 d3 0a 41 ff 01 21 d4 0a 20 d2 0a 20 d4 0a 71 21 d5 0a 41 ff 01 21 d6 0a 20 d3 0a 20 d6 0a 71 21 d7 0a 20 d5 0a 20 Data Ascii: -!A! t! u!A! G!A! q! 6\|@@ (x!A! j! 6x E (! (\|!A! j! 6\| j!A0! : (! 6 -!A!A! q!A! q!
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 03 20 ae 03 a7 21 af 03 20 06 28 02 cc 01 21 b0 03 41 10 21 b1 03 20 b0 03 20 b1 03 6a 21 b2 03 20 06 28 02 b4 01 21 b3 03 41 7f 21 b4 03 20 b3 03 20 b4 03 6a 21 b5 03 20 06 20 b5 03 36 02 b4 01 20 b2 03 20 b3 03 6a 21 b6 03 20 b6 03 20 af 03 3a 00 00 20 06 29 03 a8 01 21 b7 03 42 0a 21 b8 03 20 b7 03 20 b8 03 80 21 b9 03 20 06 20 b9 03 37 03 a8 01 0c 00 0b 0b 20 06 28 02 b4 01 21 ba 03 41 17 21 bb 03 20 bb 03 20 ba 03 6b 21 bc 03 20 06 28 02 cc 01 21 bd 03 20 bd 03 20 bc 03 36 02 04 20 06 28 02 cc 01 21 be 03 20 be 03 28 02 04 21 bf 03 20 06 28 02 a0 01 21 c0 03 20 bf 03 20 c0 03 6a 21 c1 03 20 06 28 02 cc 01 21 c2 03 20 c2 03 20 c1 03 36 02 08 20 06 28 02 bc 01 21 c3 03 41 00 21 c4 03 20 c3 03 20 c4 03 4c 21 c5 03 41 01 21 c6 03 20 c5 03 20 c6 03 71 21 Data Ascii: ! (!A! j! (!A! j! 6 j! : )!B! ! 7 (!A! k! (! 6 (! (! (! j! (! 6 (!A! L!A! q!
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: e4 02 20 04 20 e4 02 36 02 08 20 04 28 02 08 21 e5 02 20 04 28 02 34 21 e6 02 20 e6 02 20 e5 02 73 21 e7 02 20 04 20 e7 02 36 02 34 20 04 28 02 34 21 e8 02 41 10 21 e9 02 20 e8 02 20 e9 02 74 21 ea 02 20 04 28 02 34 21 eb 02 41 10 21 ec 02 20 eb 02 20 ec 02 76 21 ed 02 20 ea 02 20 ed 02 72 21 ee 02 20 04 20 ee 02 36 02 34 20 04 28 02 34 21 ef 02 20 04 28 02 20 21 f0 02 20 f0 02 20 ef 02 6a 21 f1 02 20 04 20 f1 02 36 02 20 20 04 28 02 20 21 f2 02 20 04 28 02 1c 21 f3 02 20 f3 02 20 f2 02 73 21 f4 02 20 04 20 f4 02 36 02 1c 20 04 28 02 1c 21 f5 02 41 0c 21 f6 02 20 f5 02 20 f6 02 74 21 f7 02 20 04 28 02 1c 21 f8 02 41 14 21 f9 02 20 f8 02 20 f9 02 76 21 fa 02 20 f7 02 20 fa 02 72 21 fb 02 20 04 20 fb 02 36 02 1c 20 04 28 02 1c 21 fc 02 20 04 28 02 08 21 fd Data Ascii: 6 (! (4! s! 64 (4!A! t! (4!A! v! r! 64 (4! ( ! j! 6 ( ! (! s! 6 (!A! t! (!A! v! r! 6 (! (!
2025-03-25 14:56:56 UTC	1514	IN	Data Raw: 20 32 20 33 6c 21 34 41 c0 85 87 80 00 21 35 23 83 80 80 80 00 21 36 20 36 20 35 6a 21 37 20 37 20 34 6a 21 38 20 38 28 02 00 21 39 20 04 20 39 36 02 0c 0c 03 0b 20 04 28 02 00 21 3a 41 01 21 3b 20 3a 20 3b 6a 21 3c 20 04 20 3c 36 02 00 0c 00 0b 0b 41 00 21 3d 20 04 20 3d 36 02 0c 0b 20 04 28 02 0c 21 3e 41 10 21 3f 20 04 20 3f 6a 21 40 20 40 24 80 80 80 80 00 20 3e 0f 0b 2d 01 05 7f 41 88 ac 88 80 00 21 00 23 83 80 80 80 00 21 01 20 01 20 00 6a 21 02 41 00 21 03 20 02 20 03 36 02 00 41 00 21 04 20 04 0f 0b af 11 19 1d 7f 01 7e 13 7f 01 7e 07 7f 01 7e 0a 7f 01 7e 33 7f 01 7e 02 7f 04 7e 12 7f 01 7e 02 7f 02 7e 05 7f 01 7e 05 7f 01 7e 15 7f 01 7e 04 7f 02 7e 1a 7f 23 80 80 80 80 00 21 04 41 e0 00 21 05 20 04 20 05 6b 21 06 20 06 24 80 80 80 80 00 20 06 20 Data Ascii: 2 3l!4A!5#!6 6 5j!7 7 4j!8 8(!9 96 (!:A!; : ;j!< <6A!= =6 (!>A!? ?j!@ @$ >-A!#! j!A! 6A! ~~~~3~~~~~~~~#!A! k! $
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 21 8c 01 20 8c 01 10 aa 81 80 80 00 21 8d 01 20 06 20 8d 01 36 02 24 20 06 28 02 24 21 8e 01 41 e4 00 21 8f 01 20 8e 01 20 8f 01 46 21 90 01 41 01 21 91 01 20 90 01 20 91 01 71 21 92 01 02 40 20 92 01 45 0d 00 20 06 28 02 30 21 93 01 41 00 21 94 01 20 93 01 20 94 01 10 ab 81 80 80 00 21 95 01 20 06 28 02 34 21 96 01 20 96 01 21 97 01 20 97 01 ac 21 98 01 20 95 01 20 98 01 7e 21 99 01 20 06 20 99 01 37 03 38 0b 0b 20 06 28 02 50 21 9a 01 41 00 21 9b 01 20 9a 01 20 9b 01 47 21 9c 01 41 01 21 9d 01 20 9c 01 20 9d 01 71 21 9e 01 02 40 20 9e 01 45 0d 00 20 06 29 03 38 21 9f 01 20 06 28 02 50 21 a0 01 20 a0 01 20 9f 01 37 03 00 0b 20 06 28 02 4c 21 a1 01 41 01 21 a2 01 20 a1 01 20 a2 01 71 21 a3 01 02 40 02 40 20 a3 01 45 0d 00 41 00 21 a4 01 20 06 20 a4 01 36 Data Ascii: ! ! 6$ ($!A! F!A! q!@ E (0!A! ! (4! ! ! ~! 78 (P!A! G!A! q!@ E )8! (P! 7 (L!A! q!@@ EA! 6
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 01 10 c1 81 80 80 00 20 03 28 02 1c 21 9b 01 20 9b 01 28 02 a4 02 21 9c 01 20 9c 01 10 a3 82 80 80 00 20 03 28 02 1c 21 9d 01 41 d5 01 21 9e 01 20 9d 01 20 9e 01 3a 00 61 20 03 28 02 1c 21 9f 01 20 03 28 02 1c 21 a0 01 20 a0 01 28 02 10 21 a1 01 20 a1 01 28 02 1c 21 a2 01 20 9f 01 20 a2 01 10 bb 80 80 80 00 20 03 28 02 1c 21 a3 01 20 a3 01 28 02 f8 01 21 a4 01 41 00 21 a5 01 20 a4 01 20 a5 01 47 21 a6 01 41 01 21 a7 01 20 a6 01 20 a7 01 71 21 a8 01 02 40 20 a8 01 45 0d 00 20 03 28 02 1c 21 a9 01 20 a9 01 28 02 f8 01 21 aa 01 20 03 28 02 1c 21 ab 01 20 ab 01 28 02 f4 01 21 ac 01 20 ac 01 20 aa 01 11 81 80 80 80 00 80 80 80 80 00 0b 20 03 28 02 1c 21 ad 01 41 ce 01 21 ae 01 20 ad 01 20 ae 01 3a 00 61 20 03 28 02 1c 21 af 01 20 af 01 2d 00 b8 02 21 b0 01 41 Data Ascii: (! (! (!A! :a (! (! (! (! (! (!A! G!A! q!@ E (! (! (! (! (!A! :a (! -!A
2025-03-25 14:56:56 UTC	16384	IN	Data Raw: 20 06 20 05 36 02 1c 0f 0b ec 02 01 24 7f 23 80 80 80 80 00 21 02 41 20 21 03 20 02 20 03 6b 21 04 20 04 24 80 80 80 80 00 20 04 20 00 36 02 18 20 04 20 01 36 02 14 20 04 28 02 18 21 05 20 05 2d 00 08 21 06 41 ff 01 21 07 20 06 20 07 71 21 08 02 40 02 40 20 08 0d 00 41 00 21 09 20 04 20 09 36 02 1c 0c 01 0b 20 04 28 02 18 21 0a 20 0a 2d 00 08 21 0b 41 ff 01 21 0c 20 0b 20 0c 71 21 0d 41 02 21 0e 20 0d 20 0e 46 21 0f 41 01 21 10 20 0f 20 10 71 21 11 02 40 20 11 45 0d 00 20 04 28 02 18 21 12 20 12 28 02 04 21 13 20 04 20 13 36 02 0c 20 04 28 02 0c 21 14 20 14 28 02 00 21 15 20 15 10 8f 82 80 80 00 21 16 20 04 20 16 36 02 10 20 04 28 02 10 21 17 02 40 20 17 45 0d 00 20 04 28 02 14 21 18 20 18 0d 00 20 04 28 02 10 21 19 20 04 20 19 36 02 1c 0c 02 0b 20 04 28 Data Ascii: 6$#!A ! k! $ 6 6 (! -!A! q!@@ A! 6 (! -!A! q!A! F!A! q!@ E (! (! 6 (! (! ! 6 (!@ E (! (! 6 (

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:56 UTC	796	OUT	GET /api/stripe/manage/ HTTP/1.1 Host: app.kortex.co Connection: keep-alive x-request-id: 68acd847-f5d7-47f7-adfe-878ac458f337 sec-ch-ua-platform: "Windows" x-correlation-id: no-session-id User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" x-server-select: api sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=logs=1&id=59a83584-23ae-494b-a07b-95231b0966e5&created=1742914613197&expire=1742915513197
2025-03-25 14:56:57 UTC	855	IN	HTTP/1.1 401 Unauthorized Content-Type: application/json Content-Length: 58 Connection: close Date: Tue, 25 Mar 2025 14:56:56 GMT Server: nginx www-authenticate: Bearer realm="api" vary: Accept, Cookie, origin allow: GET, POST, HEAD, OPTIONS x-frame-options: DENY x-content-type-options: nosniff referrer-policy: same-origin cross-origin-opener-policy: same-origin Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 X-Cache: Error from cloudfront Via: 1.1 7bd20765fb335de036eff4682be365d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: 3oRzr-CO8mTaRGubdCvg9Gg9lt8trCU3JlSgb1zAfifBJy6AQoAguA==
2025-03-25 14:56:57 UTC	58	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 20 77 65 72 65 20 6e 6f 74 20 70 72 6f 76 69 64 65 64 2e 22 7d Data Ascii: {"detail":"Authentication credentials were not provided."}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:57 UTC	781	OUT	GET /v3/controller-with-preconnect-f404747711a7c2c7dedf67dbfab1cb30.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://app.kortex.co/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 14:56:58 UTC	1265	IN	HTTP/1.1 200 OK Connection: close Content-Length: 667 Last-Modified: Mon, 24 Mar 2025 20:42:07 GMT ETag: "f404747711a7c2c7dedf67dbfab1cb30" Cache-Control: max-age=60, stale-while-revalidate=900 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://api.stripe.com https://merchant-ui-api.stripe.com https://stripe.com/cookie-settings/enforcement-mode https://errors.stripe.com https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src 'self'; img-src 'self' https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'sha256-0hAheEzaMe6uXIKV4EehS9pu1am1lj/KnnzrOYqckXk='; worker-src 'none'; report-uri https://q.stripe.com/csp-report origin-agent-cluster: ?1 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 0 Date: Tue, 25 Mar 2025 14:56:58 GMT Via: 1.1 varnish X-Request-ID: c29b0c48-aee9-40a2-8060-c60e645aa55f X-Served-By: cache-lga21954-LGA X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-25 14:56:58 UTC	667	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 73 74 72 69 70 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 2f 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 74 44 30 57 72 6e 4d 77 41 50 49 34 6e 57 57 43 76 72 65 45 2b 76 70 67 50 56 7a 34 35 53 4f 2f 31 66 47 31 49 5a 52 4e 70 42 73 64 57 5a 4f 5a 4e 36 53 4b 72 30 79 6e 43 31 31 4b 75 7a 72 76 54 39 30 33 57 72 45 55 2b 4e 39 49 6b 2f 52 70 69 43 52 54 41 45 41 41 41 42 62 65 79 4a 76 63 6d Data Ascii: <!doctype html><html><head><link rel="preconnect" href="https://api.stripe.com" crossorigin/><meta charset="utf-8"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJvcm

Timestamp	Bytes transferred	Direction	Data
2025-03-25 14:56:58 UTC	713	OUT	GET /assets/fonts/poppins/Poppins-Medium.ttf HTTP/1.1 Host: app.kortex.co Connection: keep-alive Origin: https://app.kortex.co sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://app.kortex.co/assets/index-C2qvVito.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=logs=1&id=59a83584-23ae-494b-a07b-95231b0966e5&created=1742914613197&expire=1742915517706
2025-03-25 14:56:58 UTC	711	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 156520 Connection: close Date: Tue, 25 Mar 2025 09:54:48 GMT Server: nginx Accept-Ranges: bytes Last-Modified: Fri, 21 Mar 2025 20:58:48 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: Authorization, Content-Type, X-Server-Select, Accept, Origin, X-Requested-With, X-Request-ID, X-Correlation-ID Access-Control-Allow-Credentials: true Access-Control-Max-Age: 3600 ETag: "sthrm03crs" X-Cache: Hit from cloudfront Via: 1.1 df10d763492b2272b777b93e70e1f4a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: oV5YDSuD-sUdyXky7GOHdKU92QS6am-beYbYGJNiFFyiJlHsp_4gWA== Age: 18130
2025-03-25 14:56:58 UTC	16384	IN	Data Raw: 00 01 00 00 00 0d 00 80 00 03 00 50 47 44 45 46 09 16 09 19 00 00 01 58 00 00 00 40 47 50 4f 53 f4 80 fe 2e 00 00 23 48 00 00 13 ac 47 53 55 42 37 e0 e0 2b 00 00 59 8c 00 00 26 76 4f 53 2f 32 da 50 78 f8 00 00 01 98 00 00 00 60 63 6d 61 70 35 09 3b 14 00 00 01 f8 00 00 02 d2 67 6c 79 66 75 d0 4d 41 00 00 80 04 00 01 e3 62 68 65 61 64 1a a8 24 67 00 00 01 20 00 00 00 36 68 68 65 61 0c 54 05 f0 00 00 00 fc 00 00 00 24 68 6d 74 78 85 e9 f3 2a 00 00 12 bc 00 00 10 8a 6c 6f 63 61 bf c8 34 82 00 00 0a 74 00 00 08 48 6d 61 78 70 04 a5 01 26 00 00 00 dc 00 00 00 20 6e 61 6d 65 be 14 1e fe 00 00 04 cc 00 00 05 a6 70 6f 73 74 3a bf 68 9b 00 00 36 f4 00 00 22 95 00 01 00 00 04 23 00 90 00 0c 00 75 00 06 00 01 00 02 00 1e 00 06 00 00 00 64 00 00 00 03 00 02 00 01 00 Data Ascii: PGDEFX@GPOS.#HGSUB7+Y&vOS/2Px`cmap5;glyfuMAbhead$g 6hheaT$hmtx*loca4tHmaxp& namepost:h6"#ud
2025-03-25 14:56:58 UTC	16384	IN	Data Raw: 05 64 76 6d 41 49 04 64 76 6d 4f 05 64 76 6d 41 55 0a 64 76 6d 45 63 61 6e 64 72 61 0a 64 76 6d 4f 63 61 6e 64 72 61 04 64 76 4b 41 05 64 76 4b 48 41 04 64 76 47 41 05 64 76 47 48 41 05 64 76 4e 47 41 04 64 76 43 41 05 64 76 43 48 41 04 64 76 4a 41 05 64 76 4a 48 41 05 64 76 4e 59 41 05 64 76 54 54 41 06 64 76 54 54 48 41 05 64 76 44 44 41 06 64 76 44 44 48 41 05 64 76 4e 4e 41 04 64 76 54 41 05 64 76 54 48 41 04 64 76 44 41 05 64 76 44 48 41 04 64 76 4e 41 04 64 76 50 41 05 64 76 50 48 41 04 64 76 42 41 05 64 76 42 48 41 04 64 76 4d 41 04 64 76 59 41 04 64 76 52 41 04 64 76 4c 41 04 64 76 56 41 05 64 76 53 48 41 05 64 76 53 53 41 04 64 76 53 41 04 64 76 48 41 05 64 76 4c 4c 41 07 64 76 4b 5f 53 53 41 07 64 76 4a 5f 4e 59 41 05 64 76 4b 78 41 06 64 76 4b Data Ascii: dvmAIdvmOdvmAUdvmEcandradvmOcandradvKAdvKHAdvGAdvGHAdvNGAdvCAdvCHAdvJAdvJHAdvNYAdvTTAdvTTHAdvDDAdvDDHAdvNNAdvTAdvTHAdvDAdvDHAdvNAdvPAdvPHAdvBAdvBHAdvMAdvYAdvRAdvLAdvVAdvSHAdvSSAdvSAdvHAdvLLAdvK_SSAdvJ_NYAdvKxAdvK
2025-03-25 14:56:59 UTC	16384	IN	Data Raw: 00 3e 00 00 00 05 00 00 00 00 01 f4 02 bc 00 03 00 06 00 09 00 0c 00 0f 00 00 11 21 11 21 01 21 17 03 37 27 01 11 07 13 27 07 01 f4 fe 0c 01 a4 fe ac aa c8 aa aa 01 90 aa 8c aa aa 02 bc fd 44 02 8a ff fe d4 ff ff fe 02 01 fe ff fe d4 ff ff 00 01 00 46 00 00 03 56 02 ed 00 38 00 00 01 15 23 11 23 11 27 16 15 14 06 23 22 26 26 35 33 14 16 33 32 36 35 34 27 23 35 26 23 23 35 33 32 36 35 34 26 23 22 06 15 23 34 36 36 33 32 16 15 14 06 07 15 16 17 33 11 03 56 7a 68 8a 0a 70 5c 42 67 39 62 43 36 35 3e 0b 02 20 51 29 29 37 3d 3d 2e 30 41 61 35 60 3d 5a 6f 3c 39 1c 18 cd 02 e4 58 fd 74 01 34 01 1d 20 57 6a 34 5d 3c 32 41 3e 33 1d 16 05 39 55 3b 29 2f 39 37 2e 39 56 2f 62 51 39 51 0f 02 06 0e 01 59 00 00 01 00 46 00 00 04 84 02 ed 00 3c 00 00 01 23 11 23 11 23 11 Data Ascii: >!!!7''DFV8##'#"&&5332654'#5&##532654&#"#466323Vzhp\Bg9bC65> Q))7==.0Aa5`=Zo<9Xt4 Wj4]<2A>39U;)/97.9V/bQ9QYF<###
2025-03-25 14:56:59 UTC	12288	IN	Data Raw: 01 35 23 15 14 06 23 22 26 35 34 36 33 33 35 34 23 22 06 15 14 17 23 26 35 34 36 33 32 16 15 15 33 11 01 23 22 06 15 14 16 33 32 36 35 03 58 7b 5f fb 74 01 6a b3 64 59 58 6b 72 59 56 54 25 2c 03 66 04 60 56 5e 57 b3 fe ee 55 2f 3c 36 2b 2e 31 02 e4 58 fd 74 ae fc 01 5b 6b 36 62 72 60 4f 54 5c 55 71 31 2b 0f 14 1a 0e 50 61 76 67 43 01 17 fe 94 31 2a 28 30 3f 38 00 00 03 ff e8 ff b2 03 3a 02 e4 00 18 00 1c 00 27 00 00 01 23 11 23 35 07 23 01 35 23 15 14 06 23 22 26 35 34 36 33 33 35 21 35 21 07 23 15 33 05 23 22 06 15 14 16 33 32 36 35 03 3a 7a 5f fc 74 01 6b ae 64 5a 57 6b 71 59 57 fe 99 03 52 de ae ae fe f3 56 2f 3b 36 2a 2e 32 02 8c fd 74 af fd 01 5c 7b 42 63 70 63 51 56 5f af 58 58 af 54 34 2c 2b 34 40 38 00 00 02 ff e8 ff c3 02 ff 02 e4 00 18 00 25 00 Data Ascii: 5##"&5463354#"#&546323#"3265X{_tjdYXkrYVT%,f`V^WU/<6+.1Xt[k6br`OT\Uq1+PavgC1(0?8:'##5#5##"&546335!5!#3#"3265:z_tkdZWkqYWRV/;6.2t\{BcpcQV_XXT4,+4@8%
2025-03-25 14:56:59 UTC	16384	IN	Data Raw: 3f 65 17 58 3e 3e 60 35 36 62 3f 3c 56 17 fe 27 07 8d fb 7e 4b 19 21 66 40 52 6e 19 3d 3d fc b5 16 4f 39 03 ce b9 bb 63 56 36 55 30 fd c3 44 21 01 02 08 4e 3d 42 57 56 43 fd 3f 3f 1f 48 43 3b 50 4e 3d 02 8c fd 74 c7 2c 34 30 2d 32 3c 3b 6a 46 3f 4d 57 3e fe c8 b7 2b 34 3a 69 46 45 68 39 32 2a c1 58 c2 27 23 28 2b 49 3c 09 4a 45 4e c2 29 2f 6a 60 bb 0f 01 4a 58 2e 52 34 c9 2b 45 27 06 14 0b 2f 41 52 43 45 52 06 2a 42 23 39 55 4d 40 42 4e 00 00 04 ff e8 ff f8 06 23 02 ed 00 34 00 3a 00 4b 00 58 00 00 01 15 14 16 33 32 36 35 35 33 15 14 06 23 22 26 35 35 34 26 23 22 06 15 11 23 35 06 06 23 22 26 26 35 34 36 36 33 32 16 17 35 21 35 21 36 33 32 16 15 14 06 23 01 15 23 11 23 11 04 16 17 33 32 36 35 34 26 23 22 07 21 15 36 36 33 00 36 36 35 34 26 23 22 06 15 14 Data Ascii: ?eX>>`56b?<V'~K!f@Rn==O9cV6U0D!N=BWVC??HC;PN=t,40-2<;jF?MW>+4:iFEh92X'#(+I<JEN)/j`JX.R4+E'/ARCERB#9UM@BN#4:KX326553#"&554&#"#5#"&&5466325!5!632###32654&#"!6636654&#"
2025-03-25 14:56:59 UTC	16384	IN	Data Raw: 70 67 6f 87 02 68 01 4a 42 39 3e 46 37 27 4b 6e 68 4d 66 fe 7d 04 d0 fe ce 51 fd f9 ab d2 51 4a 02 48 44 02 8c fd 74 a0 5d 78 6f 12 0a 1f 25 4c 20 28 26 22 52 59 4e 5d 69 58 33 3e 33 29 32 2d 45 51 4a 46 6b 58 fd af 65 56 01 3e 6d 8e 37 3e 04 3c 49 00 00 02 ff e8 fe d3 02 6e 02 e4 00 32 00 3e 00 00 12 15 14 16 16 17 16 16 15 14 07 11 23 35 06 06 23 22 26 35 34 36 37 26 26 35 33 16 16 33 32 36 35 34 26 23 22 26 35 34 36 33 33 35 21 35 21 15 23 15 23 12 36 35 35 06 23 22 06 15 14 16 33 c1 21 32 31 61 6a 25 59 17 48 2e 50 66 37 30 31 3a 64 02 4b 44 36 37 49 44 54 71 61 4d 65 fe 7a 02 86 9e af 33 3e 26 2b 48 50 42 32 01 eb 41 1b 19 06 01 03 43 4d 3b 25 fe 57 81 1e 20 61 4f 38 50 13 15 4a 2e 2a 36 29 25 30 20 36 4d 42 40 5b 58 58 a1 fd 76 41 2a 83 08 3d 3a 33 Data Ascii: pgohJB9>F7'KnhMf}QQJHDt]xo%L (&"RYN]iX3>3)2-EQJFkXeV>m7><In2>#5#"&5467&&5332654&#"&546335!5!##655#"3!21aj%YH.Pf701:dKD67IDTqaMez3>&+HPB2ACM;%W aO8PJ.6)%0 6MB@[XXvA=:3
2025-03-25 14:56:59 UTC	16384	IN	Data Raw: 33 32 36 35 04 36 35 34 26 23 22 06 15 14 16 33 05 44 7b 69 98 63 5c 58 6b 18 b8 2d 34 5b 38 3a 60 37 39 63 3e 02 51 28 2a 24 2c 04 69 04 10 fd 7d 02 e8 1d 24 5f 58 98 fa 52 31 3b 36 29 2d 32 fd da 3f 40 31 33 41 40 34 02 e4 58 fd 74 01 7d 45 66 6f 66 53 36 2a 32 4b 39 55 2c 31 5a 3b 3f 5a 2f 4f 35 3c 32 2b 13 11 18 10 2f 23 58 09 77 66 3d 01 11 fe 99 34 2d 2b 35 3f 38 96 3f 31 30 3e 3e 31 31 3e 00 00 04 ff e8 00 00 06 fd 02 ed 00 43 00 50 00 5b 00 67 00 00 01 23 11 23 35 06 06 23 22 26 27 23 15 14 06 23 22 26 35 34 37 23 16 15 14 06 06 23 22 26 26 35 34 36 36 33 21 35 34 26 23 22 06 15 14 17 23 26 35 34 37 21 35 21 36 33 32 16 15 15 33 32 36 35 35 23 35 21 07 23 15 14 07 15 14 16 33 32 36 36 35 21 23 22 06 15 14 16 33 32 36 35 04 36 35 34 26 23 22 06 15 Data Ascii: 3265654&#"3D{ic\Xk-4[8:`79c>Q($,i}$_XR1;6)-2?@13A@4Xt}EfofS62K9U,1Z;?Z/O5<2+/#Xwf=4-+5?8?10>>11>CP[g##5#"&'##"&547##"&&54663!54&#"#&547!5!63232655#5!#32665!#"3265654&#"
2025-03-25 14:56:59 UTC	16384	IN	Data Raw: 63 56 36 55 30 fc 6c 3f 1f 48 43 3b 50 4e 3d 02 8c fd 74 c7 2c 34 42 77 4e 28 37 57 3e fe c8 b7 2b 34 37 64 43 3c 4b 59 4b 12 12 4a 5a 4e 40 46 54 02 5c 02 40 70 48 49 68 37 4d 3a 3b 4c 26 23 2a 2d 32 2a c1 58 c2 3f 33 0c 48 3f 49 c5 2a 31 6a 5b b8 09 04 4c 61 2e 52 34 c3 2a 42 23 39 55 4d 40 42 4e 00 03 ff e8 ff fc 06 55 02 e4 00 3f 00 56 00 62 00 00 01 23 11 23 35 06 06 23 22 27 06 06 23 22 26 35 35 26 26 23 22 06 15 15 23 35 34 26 23 22 06 15 14 16 33 37 15 06 23 22 26 26 35 34 36 36 33 32 16 17 33 36 36 33 32 16 17 36 36 35 35 21 35 21 00 36 37 26 26 35 34 36 36 33 32 16 17 35 21 15 14 06 07 15 14 16 33 24 36 35 34 26 23 22 06 15 14 16 33 06 55 7a 68 15 47 31 12 12 1f 74 4e 77 8c 06 3b 33 3c 3d 58 3a 3a 3a 40 4c 44 1c 1a 08 4e 6e 38 37 61 3e 47 55 11 Data Ascii: cV6U0l?HC;PN=t,4BwN(7W>+47dC<KYKJZN@FT\@pHIh7M:;L&#-2X?3H?I1j[La.R4B#9UM@BNU?Vb##5#"'#"&55&&#"#54&#"37#"&&546632366326655!5!67&&5466325!3$654&#"3UzhG1tNw;3<=X:::@LDNn87a>GU
2025-03-25 14:56:59 UTC	16384	IN	Data Raw: 15 14 16 33 32 36 35 35 33 15 14 06 23 22 26 35 35 21 15 14 16 33 32 36 35 35 33 16 15 14 06 23 22 26 35 35 33 32 36 35 35 21 35 21 00 36 35 35 21 15 14 07 21 25 23 15 14 07 33 05 4d 7a 69 fe 4a 33 32 2f 35 65 6a 5e 63 6b fe 68 33 32 2f 35 65 01 6b 5d 63 6b 57 52 51 fe a1 05 65 fd a8 51 fe 69 30 01 25 01 c6 bb 30 eb 02 8c fd 74 01 5a 8f 37 43 3e 32 0c 11 5b 6a 78 61 82 87 37 43 3d 33 0c 07 0a 5b 6a 78 61 cb 54 49 54 58 fe c1 54 4a 49 54 59 3a e7 54 56 35 00 00 02 ff e8 ff 2c 02 c4 02 e4 00 35 00 41 00 00 12 06 15 14 17 36 33 32 16 15 15 23 35 34 26 27 15 14 06 23 22 26 35 35 06 06 15 14 16 16 17 15 22 26 26 35 34 36 37 26 26 35 34 36 33 33 35 21 35 21 15 23 15 21 16 07 15 14 16 33 32 36 35 35 26 23 f2 31 39 33 41 92 88 4d 26 2f 3e 39 38 3e 35 2a 34 5a 39 Data Ascii: 326553#"&55!326553#"&5532655!5!655!!%#3MziJ32/5ej^ckh32/5ek]ckWRQeQi0%0tZ7C>2[jxa7C=3[jxaTITXTJITY:TV5,5A632#54&'#"&55"&&5467&&546335!5!#!32655&#193AM&/>98>5*4Z9
2025-03-25 14:56:59 UTC	13160	IN	Data Raw: 01 11 03 02 4a ef ef 01 0d fe 81 fe fd 4d 7c 01 7f 01 cc fe 81 d2 02 5f d3 58 db 59 8e 8e 02 b8 59 fe 88 01 82 fe 7e 00 00 01 00 25 fe fa 02 cb 02 c0 00 2f 00 00 24 36 37 33 06 06 07 15 32 16 15 14 06 23 23 35 33 32 36 35 34 26 23 23 35 2e 02 35 34 36 36 33 32 16 17 23 26 26 23 22 06 06 15 14 16 16 33 01 c7 60 1b 89 24 98 64 3a 48 48 37 84 6d 1c 1c 1c 1c 37 58 90 53 5f a3 61 6f ad 27 89 1b 60 3f 45 6c 3d 3d 6c 45 5d 36 37 5c 6b 08 2b 37 32 32 3b 48 10 15 15 10 70 09 5e 9b 5f 66 a2 5b 6d 64 37 36 3e 74 4d 4d 74 3f 00 ff ff 00 4b 00 00 01 cb 03 ad 00 22 02 b8 00 00 00 07 02 d3 00 86 00 91 ff ff 00 4b 00 00 01 cb 03 ad 00 22 02 b8 00 00 00 07 03 06 00 86 00 91 ff ff 00 4b 00 00 01 cb 03 8b 00 22 02 b8 00 00 00 07 03 c7 00 6d 00 91 ff ff 00 4b 00 00 01 cb 03 Data Ascii: JM\|_XYY~%/$6732##532654&##5.546632#&&#"3`$d:HH7m7XS_ao'`?El==lE]67\k+722;Hp^_f[md76>tMMt?K"K"K"mK