Edit tour

Windows Analysis Report
https://optamembers.ca/Sys/Admin/EmailEditor/47df79c3e6c94f2eae8eb260379181e5/https://optamembers.ca/Sys/Unsubscribe?et=juo4JiwfVTgR8Nv3bkHAvn%2fXQVQbukCQyNOlBYo9CUuJ%2fTvr1UkI3frh2ugTD679z8rRCIn%2fjeS1iOxg%2fTO3WVC%2bd4QqQSnodeJUREF41F5VRaKVQctO%2fL9WXWSMfipLTIaHxf9Pjf3qx6iPtRpR%2b23Ws7pVRYRYb1RohX

Overview

General Information

Sample URL:	https://optamembers.ca/Sys/Admin/EmailEditor/47df79c3e6c94f2eae8eb260379181e5/https://optamembers.ca/Sys/Unsubscribe?et=juo4JiwfVTgR8Nv3bkHAvn%2fXQVQbukCQyNOlBYo9CUuJ%2fTvr1UkI3frh2ugTD679z8rRCIn%2fje
Analysis ID:	1524376
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Form action URLs do not match main URL

Found iframes

HTML page contains string obfuscation

Classification

Process Tree

System is w10x64native

chrome.exe (PID: 2140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 5760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2148,i,16151977546372718649,6410740653408336752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2208 /prefetch:3 MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 8264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6116,i,16151977546372718649,6410740653408336752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6112 /prefetch:8 MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 7236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://optamembers.ca/Sys/Admin/EmailEditor/47df79c3e6c94f2eae8eb260379181e5/https://optamembers.ca/Sys/Unsubscribe?et=juo4JiwfVTgR8Nv3bkHAvn%2fXQVQbukCQyNOlBYo9CUuJ%2fTvr1UkI3frh2ugTD679z8rRCIn%2fjeS1iOxg%2fTO3WVC%2bd4QqQSnodeJUREF41F5VRaKVQctO%2fL9WXWSMfipLTIaHxf9Pjf3qx6iPtRpR%2b23Ws7pVRYRYb1RohXFDIT9RFtRuc%2bFkhQZhLOVunQRXtlIEdw%3d%3d" MD5: BB7C48CDDDE076E7EB44022520F40F77)

cleanup

HTTP traffic detected: POST /api/v1/log HTTP/1.1Host: log.cookieyes.comConnection: keep-aliveContent-Length: 556sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryv2B4bZRpNGUuT6CHsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.wildapricot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.wildapricot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	TCP traffic: 192.168.11.20:56741 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:56741 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:56741 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:56741 -> 239.255.255.250:1900

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-cache, no-storePragma: no-cacheContent-Type: text/html; charset=utf-8Expires: -1Content-Security-Policy: report-uri https://csp.uel.wildapricot.com/report; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.appointlet.com *.appointletcdn.com *.aptrinsic.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.ecomm.events *.ecwid.com *.elev.io *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.linkedin.com *.mcjobboard.net *.mybillsystem.com *.newrelic.com *.nr-data.net *.pagespeed-mod.com *.paypal.com *.termly.io *.twitter.com *.typekit.net *.uservoice.com *.wildapricot.com *.youtube.com *.zdassets.com *.zendesk.com *.zopim.com caas-sf.wildapricot.org live-sf.wildapricot.org maps.googleapis.com onlinestore-prod-digital-products.s3.amazonaws.com sf.wildapricot.org vimeo.com widget-mediator.zopim.com wss://widget-mediator.zopim.com/ https://ontariopublictransit.ca ontariopublictransit.ca; img-src * data: blob:; media-src * blob:; font-src * https://*.aptrinsic.com data:; P3P: CP="CAO PSA OUR"X-UA-Compatible: IE=10Date: Wed, 02 Oct 2024 16:00:24 GMTConnection: closeContent-Length: 8137X-Backend-Server: lwf2wue1c-decbX-LB-Server: llblue1b-49feX-Content-Type-Options: nosniffReporting-Endpoints: wildapricot-csp-uel='https://csp.uel.wildapricot.com/report'Strict-Transport-Security: max-age=31536000

Source: https://www.wildapricot.com/pricing	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/7302225/7d69ce0b-ff81-430e-90b1-894e6243f5a0 wildapricot hsforms
Source: https://www.wildapricot.com/pricing	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/7302225/7d69ce0b-ff81-430e-90b1-894e6243f5a0 wildapricot hsforms
Source: https://www.wildapricot.com/pricing	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/7302225/7d69ce0b-ff81-430e-90b1-894e6243f5a0 wildapricot hsforms
Source: https://www.wildapricot.com/pricing	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/7302225/7d69ce0b-ff81-430e-90b1-894e6243f5a0 wildapricot hsforms

Source: https://www.wildapricot.com/pricing	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1067296091?random=1727884886683&cv=11&fst=1727884886683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v9178922571z86395576za201zb6395576&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1920&u_h=1080&url=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&label=w6IuCN3R4wEQ28r2_AM&hn=www.googleadservices.com&frm=0&tiba=WildApricot%20Pricing%20%7C%20Start%20a%20Free%20Trial%20with%20WildApricot!&npa=0&pscdl=noapi&auid=652576453.1727884840&uaa=x86&uab=64&uafvl=Chromium%3B128.0.6613.120%7CNot%253BA%253DBrand%3B24.0.0.0%7CGoogle%2520Chrome%3B128.0.6613.120&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.wildapricot.com/pricing	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1067296091?random=1727884886683&cv=11&fst=1727884886683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v9178922571z86395576za201zb6395576&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1920&u_h=1080&url=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&label=w6IuCN3R4wEQ28r2_AM&hn=www.googleadservices.com&frm=0&tiba=WildApricot%20Pricing%20%7C%20Start%20a%20Free%20Trial%20with%20WildApricot!&npa=0&pscdl=noapi&auid=652576453.1727884840&uaa=x86&uab=64&uafvl=Chromium%3B128.0.6613.120%7CNot%253BA%253DBrand%3B24.0.0.0%7CGoogle%2520Chrome%3B128.0.6613.120&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.wildapricot.com/pricing	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1067296091?random=1727884886683&cv=11&fst=1727884886683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v9178922571z86395576za201zb6395576&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1920&u_h=1080&url=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&label=w6IuCN3R4wEQ28r2_AM&hn=www.googleadservices.com&frm=0&tiba=WildApricot%20Pricing%20%7C%20Start%20a%20Free%20Trial%20with%20WildApricot!&npa=0&pscdl=noapi&auid=652576453.1727884840&uaa=x86&uab=64&uafvl=Chromium%3B128.0.6613.120%7CNot%253BA%253DBrand%3B24.0.0.0%7CGoogle%2520Chrome%3B128.0.6613.120&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.wildapricot.com/pricing	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1067296091?random=1727884886683&cv=11&fst=1727884886683&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v9178922571z86395576za201zb6395576&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1920&u_h=1080&url=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&label=w6IuCN3R4wEQ28r2_AM&hn=www.googleadservices.com&frm=0&tiba=WildApricot%20Pricing%20%7C%20Start%20a%20Free%20Trial%20with%20WildApricot!&npa=0&pscdl=noapi&auid=652576453.1727884840&uaa=x86&uab=64&uafvl=Chromium%3B128.0.6613.120%7CNot%253BA%253DBrand%3B24.0.0.0%7CGoogle%2520Chrome%3B128.0.6613.120&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1

Source: https://optamembers.ca/Sitemap	HTTP Parser: Found new string: script var bonaPage_BuildVer='8.10.0-ad8baf7';.var bonaPage_AdminBackendUrl = '/admin/';.var bonaPage_StatRes='https://live-sf.wildapricot.org/WebUI/';.var bonaPage_InternalPageType = { isUndefinedPage : false,isWebPage : true,isAdminPage : false,isDialogPage : false,isSystemPage : false,isErrorPage : false,isError404Page : false };.var bonaPage_PageView = { isAnonymousView : true,isMemberView : false,isAdminView : false };.var WidgetMode = 0;.var bonaPage_IsUserAnonymous = true;.var bonaPage_ThemeVer='865369cb00'; var bonaPage_ThemeId = 'whiteboard_maya_blue.v3.0'; var bonaPage_ThemeVersion = '3.0';.var bonaPage_id='18037'; version_id='';.if (bonaPage_InternalPageType && (bonaPage_InternalPageType.isSystemPage \|\| bonaPage_InternalPageType.isWebPage) && window.self !== window.top) { var success = true; try { var tmp = top.location.href; if (!tmp) { top.location = self.location; } } catch (err) { try { if (self != top) { top.location = self.location; } } catch (err) { try { if (self != top) { top = self; } success = ...
Source: https://optamembers.ca/	HTTP Parser: Found new string: script var bonaPage_BuildVer='8.10.0-ad8baf7';.var bonaPage_AdminBackendUrl = '/admin/';.var bonaPage_StatRes='https://live-sf.wildapricot.org/WebUI/';.var bonaPage_InternalPageType = { isUndefinedPage : false,isWebPage : true,isAdminPage : false,isDialogPage : false,isSystemPage : false,isErrorPage : false,isError404Page : false };.var bonaPage_PageView = { isAnonymousView : true,isMemberView : false,isAdminView : false };.var WidgetMode = 0;.var bonaPage_IsUserAnonymous = true;.var bonaPage_ThemeVer='865369cb00'; var bonaPage_ThemeId = 'whiteboard_maya_blue.v3.0'; var bonaPage_ThemeVersion = '3.0';.var bonaPage_id='7738'; version_id='';.if (bonaPage_InternalPageType && (bonaPage_InternalPageType.isSystemPage \|\| bonaPage_InternalPageType.isWebPage) && window.self !== window.top) { var success = true; try { var tmp = top.location.href; if (!tmp) { top.location = self.location; } } catch (err) { try { if (self != top) { top.location = self.location; } } catch (err) { try { if (self != top) { top = self; } success = f...
Source: https://optamembers.ca/Sys/Error/404	HTTP Parser: Found new string: script var bonaPage_BuildVer='8.10.0-ad8baf7';.var bonaPage_AdminBackendUrl = '/admin/';.var bonaPage_StatRes='https://live-sf.wildapricot.org/WebUI/';.var bonaPage_InternalPageType = { isUndefinedPage : false,isWebPage : false,isAdminPage : false,isDialogPage : false,isSystemPage : false,isErrorPage : false,isError404Page : true };.var bonaPage_PageView = { isAnonymousView : true,isMemberView : false,isAdminView : false };.var WidgetMode = 0;.var bonaPage_IsUserAnonymous = true;.var bonaPage_ThemeVer='865369cb00'; var bonaPage_ThemeId = 'whiteboard_maya_blue.v3.0'; var bonaPage_ThemeVersion = '3.0';.var bonaPage_id='18015'; version_id='';.if (bonaPage_InternalPageType && (bonaPage_InternalPageType.isSystemPage \|\| bonaPage_InternalPageType.isWebPage) && window.self !== window.top) { var success = true; try { var tmp = top.location.href; if (!tmp) { top.location = self.location; } } catch (err) { try { if (self != top) { top.location = self.location; } } catch (err) { try { if (self != top) { top = self; } success = ...

Source: https://optamembers.ca/Sys/Error/404	HTTP Parser: No favicon
Source: https://optamembers.ca/Sitemap	HTTP Parser: No favicon
Source: https://optamembers.ca/	HTTP Parser: No favicon

Source: https://www.wildapricot.com/pricing	HTTP Parser: No <meta name="author".. found
Source: https://www.wildapricot.com/pricing	HTTP Parser: No <meta name="author".. found
Source: https://www.wildapricot.com/pricing	HTTP Parser: No <meta name="author".. found
Source: https://www.wildapricot.com/pricing	HTTP Parser: No <meta name="author".. found

Source: https://www.wildapricot.com/pricing	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wildapricot.com/pricing	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wildapricot.com/pricing	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wildapricot.com/pricing	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\scoped_dir2140_925505969			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_2140_1198271516			Jump to behavior

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.11.20:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.11.20:49869 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.52.64.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.131
Source: unknown	TCP traffic detected without corresponding DNS query: 20.52.64.200
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.131
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.131
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.131
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 104.86.190.202
Source: unknown	TCP traffic detected without corresponding DNS query: 104.86.190.202
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 104.86.190.202
Source: unknown	TCP traffic detected without corresponding DNS query: 104.86.190.202
Source: unknown	TCP traffic detected without corresponding DNS query: 104.86.190.202
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 104.86.190.202
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.139
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.144
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.118.75
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.118.75
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_580.1.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},dk:function(){e=zb()},od:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_580.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_550.1.dr, chromecache_299.1.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&vb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?ob(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_550.1.dr, chromecache_299.1.dr	String found in binary or memory: function vb(){var a=new tb,b=["https://www.youtube.com"];b=b===void 0?sb:b;pa(function(c){switch(c.g){case 1:return C(c,ub(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_580.1.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={ih:e,gh:f,hh:g,Sh:k,Th:m,Ie:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(VC(w,"iframe_api")\|\|VC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!MC&&TC(x[A],p.Ie))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_529.1.dr, chromecache_588.1.dr, chromecache_384.1.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_580.1.dr	String found in binary or memory: var XB=function(a,b,c,d,e){var f=Oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Oz("fsl","nv.ids",[]):Oz("fsl","ids",[]);if(!g.length)return!0;var k=Tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!By(k,Dy(b, equals www.facebook.com (Facebook)
Source: chromecache_405.1.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/d9418494\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Network Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	Source	Malicious	Reputation
https://optamembers.ca/sys/search?q=	chromecache_578.1.dr	false	unknown
http://www.hubspot.com	chromecache_591.1.dr, chromecache_439.1.dr	false	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_580.1.dr, chromecache_384.1.dr	false	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_389.1.dr	false	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_550.1.dr, chromecache_299.1.dr	false	unknown
https://www.youtube.com	chromecache_299.1.dr	false	unknown
https://www.google.com	chromecache_384.1.dr	false	unknown
http://hubs.ly/H0702_H0	chromecache_506.1.dr	false	unknown
https://js-na1.hs-scripts.com/7302225.js	chromecache_591.1.dr, chromecache_439.1.dr	false	unknown
http://a9.com/-/spec/opensearch/1.1/	chromecache_578.1.dr	false	unknown
https://js.hs-banner.com/v2/7302225/banner.js	chromecache_506.1.dr	false	unknown
http://www.videolan.org/x264.html	chromecache_236.1.dr, chromecache_263.1.dr, chromecache_326.1.dr, chromecache_381.1.dr, chromecache_460.1.dr, chromecache_501.1.dr, chromecache_494.1.dr, chromecache_525.1.dr, chromecache_269.1.dr, chromecache_407.1.dr	false	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_389.1.dr	false	unknown
http://opensource.org/licenses/MIT).	chromecache_553.1.dr, chromecache_475.1.dr	false	unknown
https://googleads.g.doubleclick.net	chromecache_588.1.dr	false	unknown
https://tagassistant.google.com/	chromecache_389.1.dr	false	unknown
https://cct.google/taggy/agent.js	chromecache_580.1.dr, chromecache_529.1.dr, chromecache_588.1.dr, chromecache_384.1.dr	false	unknown
https://www.google.com/ads/ga-audiences	chromecache_389.1.dr	false	unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_282.1.dr, chromecache_418.1.dr	false	unknown
https://www.google.%/ads/ga-audiences	chromecache_389.1.dr	false	unknown
https://td.doubleclick.net	chromecache_580.1.dr, chromecache_529.1.dr, chromecache_588.1.dr, chromecache_384.1.dr	false	unknown
https://www.merchant-center-analytics.goog	chromecache_580.1.dr, chromecache_384.1.dr	false	unknown
https://google.com	chromecache_588.1.dr	false	unknown
https://adservice.google.com/pagead/regclk?	chromecache_384.1.dr	false	unknown
https://www.google.com/pagead/1p-user-list/1067296091/?random	chromecache_464.1.dr, chromecache_510.1.dr, chromecache_451.1.dr, chromecache_615.1.dr, chromecache_340.1.dr, chromecache_278.1.dr, chromecache_476.1.dr, chromecache_355.1.dr, chromecache_614.1.dr	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
52.213.194.252	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
13.226.52.84	cdn.wildapricot.com	United States	16509	AMAZON-02US	false
104.17.248.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
104.26.5.247	phosphor.utils.elfsightcdn.com	United States	13335	CLOUDFLARENETUS	false
104.16.118.116	track.hubspot.com	United States	13335	CLOUDFLARENETUS	false
104.18.40.240	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
172.67.20.8	unknown	United States	13335	CLOUDFLARENETUS	false
34.226.77.200	optamembers.ca	United States	14618	AMAZON-AESUS	false
18.66.255.100	unknown	United States	3	MIT-GATEWAYSUS	false
51.79.20.113	e1.envoke.com	Canada	16276	OVHFR	false
172.67.176.98	cutaactu.ca	United States	13335	CLOUDFLARENETUS	false
142.250.189.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.80.204	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.189.132	unknown	United States	15169	GOOGLEUS	false
104.16.118.43	ws.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
104.18.141.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false
104.17.175.201	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
142.250.217.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.64.174	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.166.135.80	unknown	United States	16509	AMAZON-02US	false
104.16.141.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
142.250.217.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.142.119	unknown	United States	13335	CLOUDFLARENETUS	false
13.226.52.65	unknown	United States	16509	AMAZON-02US	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.19.175.188	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
172.217.2.196	unknown	United States	15169	GOOGLEUS	false
34.171.137.194	wildapricotdev.wpengine.com	United States	2686	ATGS-MMD-ASUS	false
172.67.22.83	static.elfsight.com	United States	13335	CLOUDFLARENETUS	false
104.22.69.95	storage.elfsight.com	United States	13335	CLOUDFLARENETUS	false
104.18.37.212	unknown	United States	13335	CLOUDFLARENETUS	false
192.28.147.68	659-yym-976.mktoresp.com	United States	53580	MARKETOUS	false
150.171.28.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.160.168	unknown	United States	13335	CLOUDFLARENETUS	false
18.66.255.89	dopwhzcgl8xpz.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.16.111.254	forms.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
104.22.58.91	cdn-cookieyes.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524376
Start date and time:	2024-10-02 17:56:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://optamembers.ca/Sys/Admin/EmailEditor/47df79c3e6c94f2eae8eb260379181e5/https://optamembers.ca/Sys/Unsubscribe?et=juo4JiwfVTgR8Nv3bkHAvn%2fXQVQbukCQyNOlBYo9CUuJ%2fTvr1UkI3frh2ugTD679z8rRCIn%2fjeS1iOxg%2fTO3WVC%2bd4QqQSnodeJUREF41F5VRaKVQctO%2fL9WXWSMfipLTIaHxf9Pjf3qx6iPtRpR%2b23Ws7pVRYRYb1RohXFDIT9RFtRuc%2bFkhQZhLOVunQRXtlIEdw%3d%3d
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 128, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@31/610@174/53
Cookbook Comments:	Browse: http://www.wildapricot.com/ Browse: https://optamembers.ca/Sitemap Browse: https://optamembers.ca/ Browse: https://ontariopublictransit.ca/ Browse: https://www.wildapricot.com/#primary Browse: https://www.wildapricot.com/features Browse: https://www.wildapricot.com/who-we-serve Browse: https://www.wildapricot.com/pricing Browse: https://www.wildapricot.com/customer-testimonials

Source: global traffic	DNS traffic detected: DNS query: optamembers.ca
Source: global traffic	DNS traffic detected: DNS query: sf.wildapricot.org
Source: global traffic	DNS traffic detected: DNS query: live-sf.wildapricot.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.wildapricot.com
Source: global traffic	DNS traffic detected: DNS query: cdn-cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: log.cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: b2993016.smushcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: wildapricotdev.wpengine.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: forms.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: files.envoke.com
Source: global traffic	DNS traffic detected: DNS query: assets.adoberesources.net
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: e1.envoke.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: js.zi-scripts.com
Source: global traffic	DNS traffic detected: DNS query: directory.cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: cdn.wildapricot.com
Source: global traffic	DNS traffic detected: DNS query: ontariopublictransit.ca
Source: global traffic	DNS traffic detected: DNS query: static.elfsight.com
Source: global traffic	DNS traffic detected: DNS query: core.service.elfsight.com
Source: global traffic	DNS traffic detected: DNS query: service-reviews-ultimate.elfsight.com
Source: global traffic	DNS traffic detected: DNS query: storage.elfsight.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: phosphor.utils.elfsightcdn.com
Source: global traffic	DNS traffic detected: DNS query: cutaactu.ca
Source: global traffic	DNS traffic detected: DNS query: cta-service-cms2.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: perf-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: 659-yym-976.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: wildapricot.wpengine.com
Source: global traffic	DNS traffic detected: DNS query: js.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com

Source: chromecache_578.1.dr	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: chromecache_506.1.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_553.1.dr, chromecache_475.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_591.1.dr, chromecache_439.1.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_578.1.dr	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: chromecache_236.1.dr, chromecache_263.1.dr, chromecache_326.1.dr, chromecache_381.1.dr, chromecache_460.1.dr, chromecache_501.1.dr, chromecache_494.1.dr, chromecache_525.1.dr, chromecache_269.1.dr, chromecache_407.1.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_384.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_389.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_580.1.dr, chromecache_529.1.dr, chromecache_588.1.dr, chromecache_384.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_550.1.dr, chromecache_299.1.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_282.1.dr, chromecache_418.1.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_588.1.dr	String found in binary or memory: https://google.com
Source: chromecache_588.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_591.1.dr, chromecache_439.1.dr	String found in binary or memory: https://js-na1.hs-scripts.com/7302225.js
Source: chromecache_506.1.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1727884800000/7302225.js
Source: chromecache_506.1.dr	String found in binary or memory: https://js.hs-banner.com/v2/7302225/banner.js
Source: chromecache_506.1.dr	String found in binary or memory: https://js.hscollectedforms.net/collectedforms.js
Source: chromecache_506.1.dr	String found in binary or memory: https://js.hubspot.com/web-interactives-embed.js
Source: chromecache_578.1.dr	String found in binary or memory: https://optamembers.ca/sys/search?q=
Source: chromecache_384.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_580.1.dr, chromecache_529.1.dr, chromecache_588.1.dr, chromecache_384.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_580.1.dr, chromecache_384.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_389.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_389.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_580.1.dr, chromecache_529.1.dr, chromecache_588.1.dr, chromecache_384.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_389.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_389.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_389.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_384.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_389.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_464.1.dr, chromecache_510.1.dr, chromecache_451.1.dr, chromecache_615.1.dr, chromecache_340.1.dr, chromecache_278.1.dr, chromecache_476.1.dr, chromecache_355.1.dr, chromecache_614.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1067296091/?random
Source: chromecache_588.1.dr, chromecache_384.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_384.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_529.1.dr, chromecache_588.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_389.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_529.1.dr, chromecache_588.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_580.1.dr, chromecache_384.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_299.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_580.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2148,i,16151977546372718649,6410740653408336752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2208 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://optamembers.ca/Sys/Admin/EmailEditor/47df79c3e6c94f2eae8eb260379181e5/https://optamembers.ca/Sys/Unsubscribe?et=juo4JiwfVTgR8Nv3bkHAvn%2fXQVQbukCQyNOlBYo9CUuJ%2fTvr1UkI3frh2ugTD679z8rRCIn%2fjeS1iOxg%2fTO3WVC%2bd4QqQSnodeJUREF41F5VRaKVQctO%2fL9WXWSMfipLTIaHxf9Pjf3qx6iPtRpR%2b23Ws7pVRYRYb1RohXFDIT9RFtRuc%2bFkhQZhLOVunQRXtlIEdw%3d%3d"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6116,i,16151977546372718649,6410740653408336752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6112 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2148,i,16151977546372718649,6410740653408336752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2208 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6116,i,16151977546372718649,6410740653408336752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6112 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	unknown
forms.hsforms.com	104.19.175.188	true	false	unknown
js.zi-scripts.com	172.64.150.44	true	false	unknown
smush-2993016.b-cdn.net	195.181.163.195	true	false	unknown
event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	52.213.194.252	true	false	unknown
cta-service-cms2.hubspot.com	104.16.117.116	true	false	unknown
cdn-cookieyes.com	104.22.58.91	true	false	unknown
js.hs-analytics.net	104.17.175.201	true	false	unknown
ontariopublictransit.ca	141.193.213.10	true	false	unknown
www.wildapricot.com	104.21.26.69	true	false	unknown
cutaactu.ca	172.67.176.98	true	false	unknown
wildapricotdev.wpengine.com	34.171.137.194	true	false	unknown
track.hubspot.com	104.16.118.116	true	false	unknown
cdn.wildapricot.com	13.226.52.84	true	false	unknown
forms.hscollectedforms.net	104.16.111.254	true	false	unknown
js.hsforms.net	104.18.141.119	true	false	unknown
js.hs-scripts.com	104.16.141.209	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
e1.envoke.com	51.79.20.113	true	false	unknown
static.elfsight.com	172.67.22.83	true	false	unknown
service-reviews-ultimate.elfsight.com	104.22.68.95	true	false	unknown
www.google.com	142.250.217.196	true	false	unknown
ethos.ethos12-prod-va7.ethos.adobe.net	20.186.185.227	true	false	unknown
659-yym-976.mktoresp.com	192.28.147.68	true	false	unknown
js.hs-banner.com	104.18.40.240	true	false	unknown
core.service.elfsight.com	104.22.68.95	true	false	unknown
optamembers.ca	34.226.77.200	true	false	unknown
storage.elfsight.com	104.22.69.95	true	false	unknown
dopwhzcgl8xpz.cloudfront.net	18.66.255.89	true	false	unknown
ws.zoominfo.com	104.16.118.43	true	false	unknown
files.envoke.com	51.79.20.113	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
js.hubspot.com	104.16.117.116	true	false	unknown
sf.wildapricot.org	3.166.135.124	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
phosphor.utils.elfsightcdn.com	104.26.5.247	true	false	unknown
youtube-ui.l.google.com	142.250.64.174	true	false	unknown
wildapricot.wpengine.com	34.171.137.194	true	false	unknown
googleads.g.doubleclick.net	142.250.189.130	true	false	unknown
forms-na1.hsforms.com	104.19.175.188	true	false	unknown
td.doubleclick.net	142.250.217.194	true	false	unknown
log.cookieyes.com	52.213.194.252	true	false	unknown
perf-na1.hsforms.com	104.19.175.188	true	false	unknown
unpkg.com	104.17.248.203	true	false	unknown
js.hscollectedforms.net	104.16.111.254	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
live-sf.wildapricot.org	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
b2993016.smushcdn.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
directory.cookieyes.com	unknown	unknown	false	unknown
assets.adoberesources.net	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://optamembers.ca/	false	unknown
https://js.hs-analytics.net/analytics/1724186700000/7302225.js	false	unknown
https://files.envoke.com/web_files/208/nvk_tracking/bon_website_nvk_tracking.js	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Event-Management.png	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Online-store.png	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1920x1080&cd=24-bit&cs=UTF-8&ln=en-us&bfp=141023726&v=1.1&a=7302225&ct=listing-page&rcu=https%3A%2F%2Fwww.wildapricot.com%2Fcustomer-testimonials&pu=https%3A%2F%2Fwww.wildapricot.com%2Fcustomer-testimonials&t=Testimonials+Archive+-+WildApricot&cts=1727884895770&vi=8d7758381ff8ab055cb43f5621823398&nc=false&u=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&b=76080074.6.1727884847298&cc=15	false	unknown
https://ontariopublictransit.ca/	false	unknown
https://659-yym-976.mktoresp.com/webevents/visitWebPage?_mchNc=1727884880343&_mchCn=&_mchId=659-YYM-976&_mchTk=_mch-wildapricot.com-1727884880343-13964&_mchHo=www.wildapricot.com&_mchPo=&_mchRu=%2Fwho-we-serve&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp=	false	unknown
https://unpkg.com/flexmasonry/dist/flexmasonry.js	false	unknown
https://www.wildapricot.com/pricing	false	unknown
https://optamembers.ca/Sys/Error/404	false	unknown
https://cta-service-cms2.hubspot.com/web-interactives/public/v1/embed/combinedConfigs?portalId=7302225&currentUrl=https%3A%2F%2Fwww.wildapricot.com%2Ffeatures&utk=8d7758381ff8ab055cb43f5621823398&__hstc=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&__hssc=76080074.2.1727884847298	false	unknown
https://unpkg.com/flexmasonry@0.2.3/dist/flexmasonry.js	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Online-Payments.png	false	unknown
https://www.youtube.com/iframe_api	false	unknown
https://unpkg.com/flexmasonry/dist/flexmasonry.css	false	unknown
https://cta-service-cms2.hubspot.com/web-interactives/public/v1/embed/combinedConfigs?portalId=7302225&currentUrl=https%3A%2F%2Fwww.wildapricot.com%2Fcustomer-testimonials&utk=8d7758381ff8ab055cb43f5621823398&__hstc=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&__hssc=76080074.5.1727884847298	false	unknown
https://forms.hsforms.com/embed/v3/form/7302225/7d69ce0b-ff81-430e-90b1-894e6243f5a0/json?hs_static_app=forms-embed&hs_static_app_version=1.6227&X-HubSpot-Static-App-Info=forms-embed-1.6227&hutk=8d7758381ff8ab055cb43f5621823398	false	unknown
https://optamembers.ca/Sitemap	false	unknown
https://log.cookieyes.com/api/v1/log	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Website-Builder.png	false	unknown
https://js.hscollectedforms.net/collectedforms.js	false	unknown
https://www.wildapricot.com/#primary	false	unknown
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v2-DEFINITION_SUCCESS&count=1	false	unknown
https://optamembers.ca/resources/Pictures/OPTA%20logo.png	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Finances.png	false	unknown
https://optamembers.ca/favicon.ico	false	unknown
https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=7302225&utk=8d7758381ff8ab055cb43f5621823398	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1920x1080&cd=24-bit&cs=UTF-8&ln=en-us&bfp=141023726&v=1.1&a=7302225&ct=listing-page&rcu=https%3A%2F%2Fwww.wildapricot.com%2Ffeatures&pu=https%3A%2F%2Fwww.wildapricot.com%2Ffeatures&t=Features+Archive+-+WildApricot&cts=1727884876788&vi=8d7758381ff8ab055cb43f5621823398&nc=false&u=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&b=76080074.3.1727884847298&cc=15	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Apps.png	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1920x1080&cd=24-bit&cs=UTF-8&ln=en-us&bfp=141023726&v=1.1&a=7302225&ct=standard-page&rcu=https%3A%2F%2Fwww.wildapricot.com%2F&pu=https%3A%2F%2Fwww.wildapricot.com%2F&t=WildApricot+%7C+%231+Membership+Management+Software+Award+(6+years+in+a+row)&cts=1727884847300&vi=8d7758381ff8ab055cb43f5621823398&nc=true&u=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&b=76080074.1.1727884847298&cc=15	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Member-Management.png	false	unknown
https://ws.zoominfo.com/pixel/644a77f7c3054687355c36cc/?iszitag=true	false	unknown
https://unpkg.com/flexmasonry@0.2.3/dist/flexmasonry.css	false	unknown
https://cta-service-cms2.hubspot.com/web-interactives/public/v1/embed/combinedConfigs?portalId=7302225&currentUrl=https%3A%2F%2Fwww.wildapricot.com%2F%23primary&utk=8d7758381ff8ab055cb43f5621823398&__hstc=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&__hssc=76080074.1.1727884847298	false	unknown
https://js.hsforms.net/forms/embed/v2.js	false	unknown
https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2	false	unknown
https://directory.cookieyes.com/api/v1/ip	false	unknown
https://js.hs-scripts.com/7302225.js	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Donations.png	false	unknown
https://www.wildapricot.com/features	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1920x1080&cd=24-bit&cs=UTF-8&ln=en-us&bfp=141023726&v=1.1&a=7302225&ct=standard-page&rcu=https%3A%2F%2Fwww.wildapricot.com%2Fwho-we-serve&pu=https%3A%2F%2Fwww.wildapricot.com%2Fwho-we-serve&t=Who+We+Serve+-+WildApricot&cts=1727884880500&vi=8d7758381ff8ab055cb43f5621823398&nc=false&u=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&b=76080074.4.1727884847298&cc=15	false	unknown
https://www.wildapricot.com/who-we-serve	false	unknown
https://perf-na1.hsforms.com/embed/v3/counters.gif?key=config-loaded-success&value=1	false	unknown
https://track.hubspot.com/__ptq.gif?k=15&fi=7d69ce0b-ff81-430e-90b1-894e6243f5a0&fci=e864185a-bb33-456a-b8c3-0eb24831ac2c&ft=0&sd=1920x1080&cd=24-bit&cs=UTF-8&ln=en-us&bfp=141023726&v=1.1&a=7302225&ct=standard-page&rcu=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&pu=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&t=WildApricot+Pricing+%7C+Start+a+Free+Trial+with+WildApricot!&cts=1727884889166&vi=8d7758381ff8ab055cb43f5621823398&nc=false&u=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&b=76080074.5.1727884847298&cc=15	false	unknown
https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1	false	unknown
https://www.youtube.com/s/player/d9418494/www-widgetapi.vflset/www-widgetapi.js	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1920x1080&cd=24-bit&cs=UTF-8&ln=en-us&bfp=141023726&v=1.1&a=7302225&ct=standard-page&rcu=https%3A%2F%2Fwww.wildapricot.com%2F&pu=https%3A%2F%2Fwww.wildapricot.com%2F&t=WildApricot+%7C+%231+Membership+Management+Software+Award+(6+years+in+a+row)&cts=1727884847378&vi=8d7758381ff8ab055cb43f5621823398&nc=true&u=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&b=76080074.1.1727884847298&cc=15	false	unknown
https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=7302225&utk=	false	unknown
https://www.wildapricot.com/customer-testimonials	false	unknown
https://wildapricot.wpengine.com/wp-content/uploads/2022/11/Email-Management.png	false	unknown
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v2-RENDER_SUCCESS&count=1	false	unknown
https://e1.envoke.com/ext/analytics/visit?clientId=8bf09d7a322b6ca95845812b1e78ecd3&id=1727884841161&visitor_id=1727884841161&visit_timestamp=1727884841161&marketing_medium=direct&entry_page_url=https%253A%252F%252Fwww.wildapricot.com%252F	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1920x1080&cd=24-bit&cs=UTF-8&ln=en-us&bfp=141023726&v=1.1&a=7302225&ct=standard-page&rcu=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&pu=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&t=WildApricot+Pricing+%7C+Start+a+Free+Trial+with+WildApricot!&cts=1727884889166&vi=8d7758381ff8ab055cb43f5621823398&nc=false&u=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&b=76080074.5.1727884847298&cc=15	false	unknown
https://cta-service-cms2.hubspot.com/web-interactives/public/v1/embed/combinedConfigs?portalId=7302225&currentUrl=https%3A%2F%2Fwww.wildapricot.com%2Fwho-we-serve&utk=8d7758381ff8ab055cb43f5621823398&__hstc=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&__hssc=76080074.3.1727884847298	false	unknown
https://wildapricotdev.wpengine.com/wp-content/uploads/2022/11/pci-dss-compliant-logo.png	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	unknown
https://js.hs-analytics.net/analytics/1727884800000/7302225.js	false	unknown
https://js.hubspot.com/web-interactives-embed.js	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1920x1080&cd=24-bit&cs=UTF-8&ln=en-us&bfp=141023726&v=1.1&a=7302225&ct=standard-page&rcu=https%3A%2F%2Fwww.wildapricot.com%2F&pu=https%3A%2F%2Fwww.wildapricot.com%2F%23primary&t=WildApricot+%7C+%231+Membership+Management+Software+Award+(6+years+in+a+row)&cts=1727884870966&vi=8d7758381ff8ab055cb43f5621823398&nc=false&u=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&b=76080074.2.1727884847298&cc=15	false	unknown
https://cta-service-cms2.hubspot.com/web-interactives/public/v1/embed/combinedConfigs?portalId=7302225&currentUrl=https%3A%2F%2Fwww.wildapricot.com%2Fpricing&utk=8d7758381ff8ab055cb43f5621823398&__hstc=76080074.8d7758381ff8ab055cb43f5621823398.1727884847298.1727884847298.1727884847298.1&__hssc=76080074.4.1727884847298	false	unknown
https://www.wildapricot.com/	false	unknown
https://optamembers.ca/Admin/html_res/images/async-load-progress-01.gif	false	unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta2/dist/js/bootstrap.bundle.min.js	false	unknown
https://optamembers.ca/opensearch.ashx	false	unknown
https://optamembers.ca/Sys/Admin/EmailEditor/47df79c3e6c94f2eae8eb260379181e5/https://optamembers.ca/Sys/Unsubscribe?et=juo4JiwfVTgR8Nv3bkHAvn%2fXQVQbukCQyNOlBYo9CUuJ%2fTvr1UkI3frh2ugTD679z8rRCIn%2fjeS1iOxg%2fTO3WVC%2bd4QqQSnodeJUREF41F5VRaKVQctO%2fL9WXWSMfipLTIaHxf9Pjf3qx6iPtRpR%2b23Ws7pVRYRYb1RohXFDIT9RFtRuc%2bFkhQZhLOVunQRXtlIEdw%3d%3d	false	unknown

Input	Output
URL: https://optamembers.ca/Sys/Error/404 Model: jbxai

URL: https://optamembers.ca/Sys/Error/404 Model: jbxai

URL: https://www.wildapricot.com/ Model: jbxai

URL: https://optamembers.ca/Sitemap Model: jbxai

URL: https://optamembers.ca/ Model: jbxai

URL: https://ontariopublictransit.ca/ Model: jbxai

URL: https://ontariopublictransit.ca/ Model: jbxai

URL: https://www.wildapricot.com/features Model: jbxai

URL: https://www.wildapricot.com/#primary Model: jbxai

URL: https://www.wildapricot.com/who-we-serve Model: jbxai

URL: https://www.wildapricot.com/pricing Model: jbxai

URL: https://www.wildapricot.com/customer-testimonials Model: jbxai

URL: https://www.wildapricot.com/customer-testimonials Model: jbxai

URL: https://optamembers.ca/Sys/Error/404 Model: jbxai

URL: https://www.wildapricot.com/ Model: jbxai

URL: https://optamembers.ca/Sitemap Model: jbxai

URL: https://optamembers.ca/ Model: jbxai

URL: https://ontariopublictransit.ca/ Model: jbxai

URL: https://ontariopublictransit.ca/ Model: jbxai

URL: https://www.wildapricot.com/features Model: jbxai

URL: https://www.wildapricot.com/#primary Model: jbxai

URL: https://www.wildapricot.com/who-we-serve Model: jbxai

URL: https://www.wildapricot.com/pricing Model: jbxai

URL: https://www.wildapricot.com/customer-testimonials Model: jbxai

URL: https://www.wildapricot.com/customer-testimonials Model: jbxai

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999789195368168
Encrypted:	true
SSDEEP:	24576:PRXdntcpN2Pi9B5UFvOYWlmx3NBYsbKp4coRzOI9zdAQ:MNeij5Crx9BYrJsKq
MD5:	3D0021A340B36E9224D409093CCFA485
SHA1:	227923A091AEF43EEDF0DCBC20C633EDC12CCD0F
SHA-256:	31AFDC7E0C411DAE2B560F2D91E9FB8D57A132510172E3EA8844C6BA7110A785
SHA-512:	69DEF704512509F20A3E6B3793E176A8D075C663B04924F6850C7CD754A26D05B548EC559ED2BD5CE6899D702FD7D2D37119291583C48BF5B727E4661410C3E1
Malicious:	false
Reputation:	low
URL:	https://ontariopublictransit.ca/wp-content/uploads/2024/09/OPTA-Video-Loop-Header.mp4:2f8216d39b2c59:14
Preview:	rM............c....]9H>X.(...g...[I+...8..}....L....e]3.:...].0.........'g......p{m.TA...#.!....q...<.{'GD...Q.\.e{W..^(..Uh...............a..U..9.qD........Y!..`.... .A.A.QR..)D......6A....$.L..C.$Rf......h...ke.....[.x}........;,.w.:/1....n.)..B1[4.W7j.3.......M...-...........y..9.......sdP.....Ax.}.`Ao...vJ......H....e..@n.j....z....#K^..P{...h...nTD..;\|.....rc..QO"1..jd..R...W....9.F..B....0.XL5.+..~..3.d.f.;,(i..r..=..)am9.L....c.7....)..h......(.m.....a..j@..P..ax..d..95RUF.n.$E..l.`q......U..rb..x.6(.a.Zn....E..@L.......r..7.N..x...d..............>....H..m.=0.#..a...n.oU,.bT..9MJ..I,....z....%\|.M.'`3.........bTJQ!......5.._._.......P..Ea<.......@.....6...Dc..C..%..p.$G78.V...H.....L..;q.\|9G\|6.4...!.\S.T.g......_.q.V...$...0.l...d....).Hz..ps_.u...MV0..p..<.o.cS..._.MBYf.v.`)......PA.c.\|.y."...'..)..\p.L..hIw.W...Q...9B.yk=....Nm...MQ.i..H..i+.ysv:.".R..E.-..oQ/.x)..Wmw...ME...C..E.......$T._12..#F$..,..&.%...H.....{.=.=.Z..F...J.......

Timestamp	Bytes transferred	Direction	Data
Oct 2, 2024 18:00:54.156181097 CEST	200	OUT	GET /r/r1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Oct 2, 2024 18:00:54.299272060 CEST	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Oct 2024 15:50:11 GMT Expires: Wed, 02 Oct 2024 16:40:11 GMT Age: 643 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:23 UTC	981	OUT	GET /Sys/Admin/EmailEditor/47df79c3e6c94f2eae8eb260379181e5/https://optamembers.ca/Sys/Unsubscribe?et=juo4JiwfVTgR8Nv3bkHAvn%2fXQVQbukCQyNOlBYo9CUuJ%2fTvr1UkI3frh2ugTD679z8rRCIn%2fjeS1iOxg%2fTO3WVC%2bd4QqQSnodeJUREF41F5VRaKVQctO%2fL9WXWSMfipLTIaHxf9Pjf3qx6iPtRpR%2b23Ws7pVRYRYb1RohXFDIT9RFtRuc%2bFkhQZhLOVunQRXtlIEdw%3d%3d HTTP/1.1 Host: optamembers.ca Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:24 UTC	1467	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: /Sys/Error/404 Content-Security-Policy: report-uri https://csp.uel.wildapricot.com/report; default-src 'self' 'unsafe-inline' 'unsafe-eval' .appointlet.com .appointletcdn.com .aptrinsic.com .cloudflare.com .cloudfront.net .doubleclick.net .ecomm.events .ecwid.com .elev.io .facebook.com .facebook.net .google.com .googleadservices.com .google-analytics.com .googleapis.com .googletagmanager.com .gstatic.com .linkedin.com .mcjobboard.net .mybillsystem.com .newrelic.com .nr-data.net .pagespeed-mod.com .paypal.com .termly.io .twitter.com .typekit.net .uservoice.com .wildapricot.com .youtube.com .zdassets.com .zendesk.com .zopim.com caas-sf.wildapricot.org live-sf.wildapricot.org maps.googleapis.com onlinestore-prod-digital-products.s3.amazonaws.com sf.wildapricot.org vimeo.com widget-mediator.zopim.com wss://widget-mediator.zopim.com/ https://ontariopublictransit.ca ontariopublictransit.ca; img-src data: blob:; media-src * blob:; font-src * https://*.aptrinsic.com data:; P3P: CP="CAO PSA OUR" X-UA-Compatible: IE=10 Date: Wed, 02 Oct 2024 16:00:23 GMT Connection: close Content-Length: 131 X-Backend-Server: lwf2wue1d-a268 X-LB-Server: llblue1b-49fe X-Content-Type-Options: nosniff Reporting-Endpoints: wildapricot-csp-uel='https://csp.uel.wildapricot.com/report' Strict-Transport-Security: max-age=31536000
2024-10-02 16:00:24 UTC	131	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 53 79 73 2f 45 72 72 6f 72 2f 34 30 34 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Sys/Error/404">here</a>.</h2></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:24 UTC	677	OUT	GET /Sys/Error/404 HTTP/1.1 Host: optamembers.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:25 UTC	1488	IN	HTTP/1.1 404 Not Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Content-Security-Policy: report-uri https://csp.uel.wildapricot.com/report; default-src 'self' 'unsafe-inline' 'unsafe-eval' .appointlet.com .appointletcdn.com .aptrinsic.com .cloudflare.com .cloudfront.net .doubleclick.net .ecomm.events .ecwid.com .elev.io .facebook.com .facebook.net .google.com .googleadservices.com .google-analytics.com .googleapis.com .googletagmanager.com .gstatic.com .linkedin.com .mcjobboard.net .mybillsystem.com .newrelic.com .nr-data.net .pagespeed-mod.com .paypal.com .termly.io .twitter.com .typekit.net .uservoice.com .wildapricot.com .youtube.com .zdassets.com .zendesk.com .zopim.com caas-sf.wildapricot.org live-sf.wildapricot.org maps.googleapis.com onlinestore-prod-digital-products.s3.amazonaws.com sf.wildapricot.org vimeo.com widget-mediator.zopim.com wss://widget-mediator.zopim.com/ https://ontariopublictransit.ca ontariopublictransit.ca; img-src data: blob:; media-src * blob:; font-src * https://*.aptrinsic.com data:; P3P: CP="CAO PSA OUR" X-UA-Compatible: IE=10 Date: Wed, 02 Oct 2024 16:00:24 GMT Connection: close Content-Length: 8137 X-Backend-Server: lwf2wue1c-decb X-LB-Server: llblue1b-49fe X-Content-Type-Options: nosniff Reporting-Endpoints: wildapricot-csp-uel='https://csp.uel.wildapricot.com/report' Strict-Transport-Security: max-age=31536000
2024-10-02 16:00:25 UTC	8137	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 Data Ascii: <!DOCTYPE html>...[if lt IE 7 ]><html lang="en" class="no-js ie6 "><![endif]-->...[if IE 7 ]><html lang="en" class="no-js ie7 "> <![endif]-->...[if IE 8 ]><html lang="en" class="no-js ie8 "> <![endif]-->...[if IE 9 ]><html lang="en" class="no-js i

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:27 UTC	641	OUT	GET /Admin/html_res/images/async-load-progress-01.gif HTTP/1.1 Host: optamembers.ca Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://optamembers.ca/Sys/Error/404 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:27 UTC	1534	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Type: image/gif Last-Modified: Fri, 13 Sep 2024 14:36:39 GMT Accept-Ranges: bytes ETag: "9bae4f58ea5db1:0" Content-Security-Policy: report-uri https://csp.uel.wildapricot.com/report; default-src 'self' 'unsafe-inline' 'unsafe-eval' .appointlet.com .appointletcdn.com .aptrinsic.com .cloudflare.com .cloudfront.net .doubleclick.net .ecomm.events .ecwid.com .elev.io .facebook.com .facebook.net .google.com .googleadservices.com .google-analytics.com .googleapis.com .googletagmanager.com .gstatic.com .linkedin.com .mcjobboard.net .mybillsystem.com .newrelic.com .nr-data.net .pagespeed-mod.com .paypal.com .termly.io .twitter.com .typekit.net .uservoice.com .wildapricot.com .youtube.com .zdassets.com .zendesk.com .zopim.com caas-sf.wildapricot.org live-sf.wildapricot.org maps.googleapis.com onlinestore-prod-digital-products.s3.amazonaws.com sf.wildapricot.org vimeo.com widget-mediator.zopim.com wss://widget-mediator.zopim.com/ https://ontariopublictransit.ca ontariopublictransit.ca; img-src data: blob:; media-src * blob:; font-src * https://*.aptrinsic.com data:; P3P: CP="CAO PSA OUR" X-UA-Compatible: IE=10 Date: Wed, 02 Oct 2024 16:00:27 GMT Connection: close Content-Length: 1787 X-Backend-Server: lwf2wue1c-decb X-LB-Server: llblue1b-49fe X-Content-Type-Options: nosniff Reporting-Endpoints: wildapricot-csp-uel='https://csp.uel.wildapricot.com/report' Strict-Transport-Security: max-age=31536000
2024-10-02 16:00:27 UTC	1787	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 b3 00 00 ff ff ff b3 b3 b3 fb fb fb d6 d6 d6 e1 e1 e1 f2 f2 f2 ba ba ba 81 81 81 34 34 34 01 01 01 1b 1b 1b c4 c4 c4 97 97 97 fd fd fd 54 54 54 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 05 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 e7 10 c8 49 29 4b ac ea cd a7 4a 4a 35 10 9d 16 1c 55 a2 52 4b 10 94 14 a1 28 0e a5 26 13 e1 1a 30 35 2b 2f c9 6d 62 70 0d 7a 93 c3 0c 31 19 02 06 3b 24 05 31 43 01 9c ae 00 49 2a 09 fc 48 43 68 60 41 11 6f 01 01 04 22 33 71 54 35 ba 5c d1 38 61 a8 11 8e e0 42 c1 ee b4 b2 64 14 0e 77 78 47 3d 59 01 06 67 14 01 83 77 48 62 86 1d 76 08 41 3d 92 30 04 56 5c 9c 5c 88 3b 04 0b 0c 07 a4 a5 9c 9f 3b a5 aa 9b 48 a8 8a a2 ab ac 9d b3 1d 98 30 b6 b5 74 25 91 48 73 89 8b 72 Data Ascii: GIF89a 444TTT!NETSCAPE2.0!, I)KJJ5URK(&05+/mbpz1;$1CI*HCh`Ao"3qT5\8aBdwxG=YgwHbvA=0V\\;;H0t%Hsr

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:28 UTC	604	OUT	GET /favicon.ico HTTP/1.1 Host: optamembers.ca Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://optamembers.ca/Sys/Error/404 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:28 UTC	1537	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Type: image/x-icon Last-Modified: Fri, 13 Sep 2024 14:36:50 GMT Accept-Ranges: bytes ETag: "1f1715eea5db1:0" Content-Security-Policy: report-uri https://csp.uel.wildapricot.com/report; default-src 'self' 'unsafe-inline' 'unsafe-eval' .appointlet.com .appointletcdn.com .aptrinsic.com .cloudflare.com .cloudfront.net .doubleclick.net .ecomm.events .ecwid.com .elev.io .facebook.com .facebook.net .google.com .googleadservices.com .google-analytics.com .googleapis.com .googletagmanager.com .gstatic.com .linkedin.com .mcjobboard.net .mybillsystem.com .newrelic.com .nr-data.net .pagespeed-mod.com .paypal.com .termly.io .twitter.com .typekit.net .uservoice.com .wildapricot.com .youtube.com .zdassets.com .zendesk.com .zopim.com caas-sf.wildapricot.org live-sf.wildapricot.org maps.googleapis.com onlinestore-prod-digital-products.s3.amazonaws.com sf.wildapricot.org vimeo.com widget-mediator.zopim.com wss://widget-mediator.zopim.com/ https://ontariopublictransit.ca ontariopublictransit.ca; img-src data: blob:; media-src * blob:; font-src * https://*.aptrinsic.com data:; P3P: CP="CAO PSA OUR" X-UA-Compatible: IE=10 Date: Wed, 02 Oct 2024 16:00:27 GMT Connection: close Content-Length: 15086 X-Backend-Server: lwf2wue1c-cbb3 X-LB-Server: llblue1b-49fe X-Content-Type-Options: nosniff Reporting-Endpoints: wildapricot-csp-uel='https://csp.uel.wildapricot.com/report' Strict-Transport-Security: max-age=31536000
2024-10-02 16:00:28 UTC	10946	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 87 ff 02 03 87 ff 43 03 87 ff b1 03 87 ff e5 03 87 ff e5 03 87 ff b2 03 87 ff 44 03 87 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $CD
2024-10-02 16:00:29 UTC	2192	IN	Data Raw: 03 87 ff de 03 87 ff de 03 87 ff ff 03 87 ff dd 03 87 ff 96 03 87 ff aa 03 87 ff ff 03 87 ff c7 03 87 ff ac 03 87 ff ee 03 87 ff fe 03 87 ff b6 03 87 ff 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 87 ff 14 03 87 ff 77 03 87 ff d7 03 87 ff fc 03 87 ff ff 03 87 ff ff 03 87 ff ff 03 87 ff ff 03 87 ff e9 03 87 ff 9b 03 87 ff 2c 03 87 ff 2b 03 87 ff 9a 03 87 ff e8 03 87 ff ff 03 87 ff ff 03 87 ff ff 03 87 ff ff 03 87 ff fc 03 87 ff d7 03 87 ff 78 03 87 ff 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 87 ff 01 03 87 ff 1b 03 87 ff 4e 03 87 ff b5 03 87 ff ff 03 87 ff b7 03 87 ff 5e 03 87 ff 2b 03 87 ff Data Ascii: %w,+xN^+
2024-10-02 16:00:29 UTC	1948	IN	Data Raw: 03 87 ff 06 00 00 00 00 03 87 ff 12 03 87 ff b1 03 87 ff ff 03 87 ff cf 03 87 ff c0 03 87 ff fc 03 87 ff c6 03 87 ff 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 87 ff 3d 03 87 ff c8 03 87 ff f8 03 87 ff f4 03 87 ff ae 03 87 ff 23 00 00 00 00 00 00 00 00 03 87 ff 19 03 87 ff da 03 87 ff e1 03 87 ff 1e 03 87 ff 1d 03 87 ff e0 03 87 ff dc 03 87 ff 1a 00 00 00 00 00 00 00 00 03 87 ff 22 03 87 ff ad 03 87 ff f3 03 87 ff f8 03 87 ff c9 03 87 ff 3e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 87 ff 15 03 87 ff 3c 03 87 ff 36 03 87 ff 0d 00 00 00 00 00 00 00 00 00 00 00 00 03 87 ff 28 03 87 ff eb 03 87 ff cb 03 87 ff 0e 03 87 ff 0d 03 87 ff c9 03 87 ff Data Ascii: =#"><6(

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:37 UTC	617	OUT	GET /npm/bootstrap@5.0.0-beta2/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" Origin: https://www.wildapricot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.wildapricot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:38 UTC	782	IN	HTTP/1.1 200 OK Connection: close Content-Length: 80217 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.0.0-beta2 X-JSD-Version-Type: version ETag: W/"13959-wU1JYET6lDtu5Q6aYn/N6BT6oLY" Accept-Ranges: bytes Age: 1606125 Date: Wed, 02 Oct 2024 16:00:38 GMT X-Served-By: cache-fra-eddf8230152-FRA, cache-pdk-kfty2130055-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 30 2d 62 65 74 61 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: /! Bootstrap v5.0.0-beta2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 74 28 22 23 22 29 5b 31 5d 29 2c 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 65 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 61 28 74 29 3b 72 65 74 75 72 6e 20 65 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 61 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3a 6e 75 6c 6c 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 2c 6e 3d 65 2e 74 72 61 6e 73 69 Data Ascii: t("#")[1]),e=n&&"#"!==n?n.trim():null}return e},l=function(t){var e=a(t);return e&&document.querySelector(e)?e:null},c=function(t){var e=a(t);return e?document.querySelector(e):null},u=function(t){if(!t)return 0;var e=window.getComputedStyle(t),n=e.transi
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 22 29 3f 74 3a 6e 75 6c 6c 7d 2c 62 3d 22 72 74 6c 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 69 72 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 5f 28 29 3b 69 66 28 6e 29 7b 76 61 72 20 69 3d 6e 2e 66 6e 5b 74 5d 3b 6e 2e 66 6e 5b 74 5d 3d 65 2e 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6e 2e 66 6e 5b 74 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 65 2c 6e 2e 66 6e 5b 74 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 66 6e 5b 74 5d 3d 69 2c 65 2e 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 7d 7d 2c 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 Data Ascii: ")?t:null},b="rtl"===document.documentElement.dir,y=function(t,e){var n;n=function(){var n=_();if(n){var i=n.fn[t];n.fn[t]=e.jQueryInterface,n.fn[t].Constructor=e,n.fn[t].noConflict=function(){return n.fn[t]=i,e.jQueryInterface}}},"loading"===document.rea
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 45 76 65 6e 74 7c 7c 44 2b 2b 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 76 61 72 20 65 3d 53 28 74 29 3b 72 65 74 75 72 6e 20 74 2e 75 69 64 45 76 65 6e 74 3d 65 2c 4f 5b 65 5d 3d 4f 5b 65 5d 7c 7c 7b 7d 2c 4f 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 66 6f 72 28 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2c 6f 3d 30 2c 72 3d 69 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 74 5b 69 5b 6f 5d 5d 3b 69 66 28 73 2e 6f 72 69 67 69 6e 61 6c 48 61 6e 64 6c 65 72 3d 3d 3d 65 26 26 73 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 73 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 Data Ascii: Event\|\|D++}function j(t){var e=S(t);return t.uidEvent=e,O[e]=O[e]\|\|{},O[e]}function N(t,e,n){void 0===n&&(n=null);for(var i=Object.keys(t),o=0,r=i.length;o<r;o++){var s=t[i[o]];if(s.originalHandler===e&&s.delegationSelector===n)return s}return null}functi
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 6e 28 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 69 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 7c 7c 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 72 2e 69 6e 63 6c 75 64 65 73 28 69 29 29 7b 76 61 72 20 73 3d 6f 5b 72 5d 3b 4d 28 74 2c 65 2c 6e 2c 73 2e 6f 72 69 67 69 6e 61 6c 48 61 6e 64 6c 65 72 2c 73 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 29 29 7d 28 74 2c 63 2c 6e 2c 65 2e 73 6c 69 63 65 28 31 29 29 7d 29 29 3b 76 61 72 20 66 3d 63 5b 61 5d 7c 7c 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 66 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 6e 2e 72 65 70 6c 61 63 65 28 4c 2c 22 22 29 3b 69 66 28 21 Data Ascii: n(n){!function(t,e,n,i){var o=e[n]\|\|{};Object.keys(o).forEach((function(r){if(r.includes(i)){var s=o[r];M(t,e,n,s.originalHandler,s.delegationSelector)}}))}(t,c,n,e.slice(1))}));var f=c[a]\|\|{};Object.keys(f).forEach((function(n){var i=n.replace(L,"");if(!
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6f 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 3f 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 3a 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 3b 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 6e 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 6f 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 28 74 29 7c 7c 74 2e 63 6c 6f 73 65 73 74 28 22 2e 61 6c 65 72 74 22 29 7d 2c 6f 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f Data Ascii: totype;return o.close=function(t){var e=t?this._getRootElement(t):this._element,n=this._triggerCloseEvent(e);null===n\|\|n.defaultPrevented\|\|this._removeElement(e)},o._getRootElement=function(t){return c(t)\|\|t.closest(".alert")},o._triggerCloseEvent=functio
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 6e 22 62 73 2e 62 75 74 74 6f 6e 22 7d 7d 5d 29 2c 6e 7d 28 48 29 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 74 29 7b 72 65 74 75 72 6e 22 74 72 75 65 22 3d 3d 3d 74 7c 7c 22 66 61 6c 73 65 22 21 3d 3d 74 26 26 28 74 3d 3d 3d 4e 75 6d 62 65 72 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 29 3f 4e 75 6d 62 65 72 28 74 29 3a 22 22 3d 3d 3d 74 7c 7c 22 6e 75 6c 6c 22 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 5b 41 2d 5a 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 2d 22 2b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 29 7d 42 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 27 Data Ascii: n"bs.button"}}]),n}(H);function K(t){return"true"===t\|\|"false"!==t&&(t===Number(t).toString()?Number(t):""===t\|\|"null"===t?null:t)}function U(t){return t.replace(/[A-Z]/g,(function(t){return"-"+t.toLowerCase()}))}B.on(document,"click.bs.button.data-api",'
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 6e 2c 74 2e 63 68 69 6c 64 72 65 6e 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6d 61 74 63 68 65 73 28 65 29 7d 29 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 6e 3b 29 7b 69 66 28 6e 2e 6d 61 74 63 68 65 73 28 65 29 29 72 65 74 75 72 6e 5b 6e 5d 3b 6e 3d 6e 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 5b 5d 7d 2c 58 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 2c 74 6f 75 63 68 Data Ascii: ).concat.apply(n,t.children).filter((function(t){return t.matches(e)}))},V=function(t,e){for(var n=t.previousElementSibling;n;){if(n.matches(e))return[n];n=n.previousElementSibling}return[]},X={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0,touch
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 75 70 64 61 74 65 49 6e 74 65 72 76 61 6c 28 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 72 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 59 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 74 68 69 Data Ascii: onfig.interval&&!this._isPaused&&(this._updateInterval(),this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},r.to=function(t){var e=this;this._activeElement=Y(".active.carousel-item",thi
2024-10-02 16:00:38 UTC	1378	IN	Data Raw: 75 63 68 26 26 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 26 26 74 68 69 73 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 2c 72 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 22 70 65 6e 22 21 3d 3d 65 2e 70 6f 69 6e 74 65 72 54 79 70 65 26 26 22 74 6f 75 63 68 22 21 3d 3d 65 2e 70 6f 69 6e 74 65 72 54 79 70 65 3f 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 3a 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 Data Ascii: uch&&this._touchSupported&&this._addTouchEventListeners()},r._addTouchEventListeners=function(){var t=this,e=function(e){!t._pointerEvent\|\|"pen"!==e.pointerType&&"touch"!==e.pointerType?t._pointerEvent\|\|(t.touchStartX=e.touches[0].clientX):t.touchStartX=e

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:38 UTC	608	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" Origin: https://www.wildapricot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.wildapricot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:38 UTC	929	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 16:00:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1047691 Expires: Mon, 22 Sep 2025 16:00:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aSpzybo%2BeMH6KB9iitTgkLHZoW3%2FZtkbiwyWVtFJuwDy2z5c36u3f0ekEpb%2Fgy7yjzORU9llkgdNgiIs2GcaBU0Y7Z9cEuGmZxoTEL7mvD7PDLCopdbWUOhrLoAilH8sQO5dLYIb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cc5e8115c043347-MIA
2024-10-02 16:00:38 UTC	440	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 Data Ascii: omputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 Data Ascii: 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 Data Ascii: eft-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 Data Ascii: idth,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clie
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a Data Ascii: deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 Data Ascii: s.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d Data Ascii: ion(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c Data Ascii: ','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.pl
2024-10-02 16:00:38 UTC	1369	IN	Data Raw: 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 Data Ascii: i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnProp

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:38 UTC	679	OUT	POST /api/v1/log HTTP/1.1 Host: log.cookieyes.com Connection: keep-alive Content-Length: 556 sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryv2B4bZRpNGUuT6CH sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wildapricot.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.wildapricot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:38 UTC	556	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 32 42 34 62 5a 52 70 4e 47 55 75 54 36 43 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6b 65 79 22 0d 0a 0d 0a 34 61 66 33 35 36 39 62 65 62 35 39 64 66 61 36 62 34 35 37 64 34 65 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 32 42 34 62 5a 52 70 4e 47 55 75 54 36 43 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 5f 74 79 70 65 22 0d 0a 0d 0a 62 61 6e 6e 65 72 5f 6c 6f 61 64 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 32 42 34 62 5a 52 Data Ascii: ------WebKitFormBoundaryv2B4bZRpNGUuT6CHContent-Disposition: form-data; name="key"4af3569beb59dfa6b457d4ee------WebKitFormBoundaryv2B4bZRpNGUuT6CHContent-Disposition: form-data; name="request_type"banner_load------WebKitFormBoundaryv2B4bZR
2024-10-02 16:00:39 UTC	316	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 16:00:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * X-Robots-Tag: noindex, nofollow Link: <https://www.cookieyes.com>; rel="canonical" ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-10-02 16:00:39 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:39 UTC	584	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" Origin: https://www.wildapricot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.wildapricot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:40 UTC	1352	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 16:00:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Sep 2024 08:47:39 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: lfSnPi6du9uQQl9EfUkg_44QCbCVLa2H etag: W/"48bb5c8a01043eceaf45e65d5c98950b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 736ad67f05a9a5a8fd5ed8cba30196f4.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: T7ovRYIZWMgxPs_w74FwwgFyKy8oNu-Mr7bApyQf9JCVq77MeBaGdw== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.772/bundles/project.js&cfRay=8c1ea39e5d719ab9-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.772/bundles/project.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: HIT x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: efd69450-f253-4b68-9bd0-9d95e531d527 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-5f4dcb8bc8-ps9qc x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-10-02 16:00:40 UTC	211	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 65 66 64 36 39 34 35 30 2d 66 32 35 33 2d 34 62 36 38 2d 39 62 64 30 2d 39 64 39 35 65 35 33 31 64 35 32 37 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 6a 73 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 35 37 37 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 63 35 65 38 31 62 33 61 31 37 37 34 38 61 2d 4d 49 41 0d 0a 0d 0a Data Ascii: x-request-id: efd69450-f253-4b68-9bd0-9d95e531d527cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 577Server: cloudflareCF-RAY: 8cc5e81b3a17748a-MIA
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 72 6f 6a 65 63 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 Data Ascii: 7ff9/! For license information please see project.js.LICENSE.txt /!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 3d 7b 66 3a 68 3f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 28 74 29 3b 65 3d 66 28 65 2c 21 30 29 3b 76 28 72 29 3b 69 66 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 77 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ct.defineProperty,S={f:h?w:function(t,e,r){v(t);e=f(e,!0);v(r);if(y)try{return w(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurab
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 44 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 64 28 28 66 75 6e 63 Data Ascii: n(){var e=[];(e.constructor={})[D]=function(){return{foo:1}};return 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=d((func
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 66 6f 72 63 65 2c 68 74 2e 67 65 74 74 65 72 46 6f 72 2c 41 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 68 74 2e 67 65 74 2c 72 3d 68 74 2e 65 6e 66 6f 72 63 65 2c 6e 3d 53 74 72 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: force,ht.getterFor,A((function(t){var e=ht.get,r=ht.enforce,n=String(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typ
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 68 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 5d 3b 4a 28 74 2c 73 29 7c 7c 6e 28 74 2c 73 2c 69 28 65 2c 73 29 29 7d 7d 2c 78 74 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 64 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e Data Ascii: h;o++){var s=r[o];J(t,s)\|\|n(t,s,i(e,s))}},xt=/#\|\.prototype\./,Ct=function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?d(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 74 29 2c 71 74 29 29 3f 6e 3a 56 74 3f 65 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 69 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 55 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 Data Ascii: bject(t),qt))?n:Vt?e(r):"Object"==(i=e(r))&&"function"==typeof r.callee?"Arguments":i},Ht={};Ht[U("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toStr
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 64 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 77 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 53 65 3d 59 2e 66 2c 45 65 3d 53 2e 66 2c Data Ascii: tyNames?Object.getOwnPropertyNames(window):[],me=function(t){try{return de(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):de(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,we=ht.getterFor(ye),Se=Y.f,Ee=S.f,
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 2c 74 29 7c 7c 4a 28 74 68 69 73 2c 67 65 29 26 26 74 68 69 73 5b 67 65 5d 5b 74 5d 29 7c 7c 65 29 7d 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 57 28 74 29 3b 65 3d 66 28 65 2c 21 30 29 3b 69 66 28 74 21 3d 3d 6b 65 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 53 65 28 74 2c 65 29 3b 21 72 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 4a 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 4a 28 69 74 2c 65 29 Data Ascii: ,t)\|\|J(this,ge)&&this[ge][t])\|\|e)},ze=function(t,e){t=W(t);e=f(e,!0);if(t!==ke\|\|!J(Ne,e)\|\|J(Ie,e)){var r=Se(t,e);!r\|\|!J(Ne,e)\|\|J(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)J(Ne,e=r[i++])\|\|J(it,e)
2024-10-02 16:00:40 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 21 50 2c 73 68 61 6d 3a 21 68 7d 2c 7b 63 72 65 61 74 65 3a 71 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 4d 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 44 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 50 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 50 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 46 65 26 26 50 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 50 7c 7c 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 65 28 29 Data Ascii: 0,forced:!P,sham:!h},{create:qe,defineProperty:Me,defineProperties:De,getOwnPropertyDescriptor:ze});Pt({target:"Object",stat:!0,forced:!P},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Fe&&Pt({target:"JSON",stat:!0,forced:!P\|\|d((function(){var t=Ae()

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:40 UTC	650	OUT	GET /wp-content/uploads/2022/11/pci-dss-compliant-logo.png HTTP/1.1 Host: wildapricotdev.wpengine.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wildapricot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:40 UTC	322	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 02 Oct 2024 16:00:40 GMT Content-Type: image/png Content-Length: 694 Connection: close Last-Modified: Wed, 29 Mar 2023 07:32:16 GMT ETag: "6423e980-2b6" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-10-02 16:00:40 UTC	694	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 2e 08 03 00 00 00 e9 ff 4c 6c 00 00 00 69 50 4c 54 45 47 70 4c 1c 5e 63 1c 5e 63 1c 5e 63 1c 5e 62 1d 73 61 1f 68 61 1c 5e 63 1c 5e 63 1f 79 61 1b 5e 63 1c 5e 63 1c 5e 63 26 bd 5d 1c 5e 63 1c 5e 63 26 bd 5d 25 bf 5c 27 bd 5c 26 bc 5c 26 be 5c c9 d9 da ff ff ff 1c 5e 63 fe fe fe 26 bd 5d a3 bd bf 97 b5 b7 52 84 88 f1 f5 f5 25 64 69 dc e5 e6 7f a3 a6 b6 ca cb c3 e1 d3 53 26 2f ed 00 00 00 17 74 52 4e 53 00 fc 6e c0 42 29 07 f5 5c 13 d3 81 93 b0 df a9 f7 51 88 8d 7a b5 8a ec a3 9e 6d 00 00 01 e5 49 44 41 54 78 da ed d4 db 56 ab 30 14 85 e1 09 04 c2 a9 a0 ee c3 04 77 69 ab ef ff 90 1b 42 60 05 28 8e 8a f4 46 fb 0d 07 e4 c6 fc 24 90 e2 e1 e1 fb 4b 54 56 a6 1e 8d bd a6 4c 54 a9 b9 06 5b 05 05 Data Ascii: PNGIHDRd.LliPLTEGpL^c^c^c^bsaha^c^cya^c^c^c&]^c^c&]%\'\&\&\^c&]R%diS&/tRNSnB)\QzmIDATxV0wiB`(F$KTVLT[

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:40 UTC	370	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:41 UTC	1363	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 16:00:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Sep 2024 08:47:39 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: lfSnPi6du9uQQl9EfUkg_44QCbCVLa2H etag: W/"48bb5c8a01043eceaf45e65d5c98950b" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 f57a09c5455a80253c61001d750462e6.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: WwqE7Ok8RhQyi9H4GJ8UJhGqrSHm5zPVBvuwFiB-1iMj08kzmGywQQ== Age: 247 content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.772/bundles/project.js&cfRay=8c6f84f8acbd7476-MIA Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.772/bundles/project.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: MISS x-envoy-upstream-service-time: 5 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a9525da8-7db7-46bf-a32b-a2e434b0934a x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-5f4dcb8bc8-lwpgr x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-10-02 16:00:41 UTC	201	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 61 39 35 32 35 64 61 38 2d 37 64 62 37 2d 34 36 62 66 2d 61 33 32 62 2d 61 32 65 34 33 34 62 30 39 33 34 61 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 6a 73 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 63 35 65 38 32 31 62 65 66 63 38 64 61 39 2d 4d 49 41 0d 0a 0d 0a Data Ascii: x-request-id: a9525da8-7db7-46bf-a32b-a2e434b0934acache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prodCF-Cache-Status: HITServer: cloudflareCF-RAY: 8cc5e821befc8da9-MIA
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 72 6f 6a 65 63 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 Data Ascii: 7ff9/! For license information please see project.js.LICENSE.txt /!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 3d 7b 66 3a 68 3f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 28 74 29 3b 65 3d 66 28 65 2c 21 30 29 3b 76 28 72 29 3b 69 66 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 77 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ct.defineProperty,S={f:h?w:function(t,e,r){v(t);e=f(e,!0);v(r);if(y)try{return w(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurab
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 44 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 64 28 28 66 75 6e 63 Data Ascii: n(){var e=[];(e.constructor={})[D]=function(){return{foo:1}};return 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=d((func
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 66 6f 72 63 65 2c 68 74 2e 67 65 74 74 65 72 46 6f 72 2c 41 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 68 74 2e 67 65 74 2c 72 3d 68 74 2e 65 6e 66 6f 72 63 65 2c 6e 3d 53 74 72 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: force,ht.getterFor,A((function(t){var e=ht.get,r=ht.enforce,n=String(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typ
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 68 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 5d 3b 4a 28 74 2c 73 29 7c 7c 6e 28 74 2c 73 2c 69 28 65 2c 73 29 29 7d 7d 2c 78 74 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 64 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e Data Ascii: h;o++){var s=r[o];J(t,s)\|\|n(t,s,i(e,s))}},xt=/#\|\.prototype\./,Ct=function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?d(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 74 29 2c 71 74 29 29 3f 6e 3a 56 74 3f 65 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 69 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 55 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 Data Ascii: bject(t),qt))?n:Vt?e(r):"Object"==(i=e(r))&&"function"==typeof r.callee?"Arguments":i},Ht={};Ht[U("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toStr
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 64 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 77 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 53 65 3d 59 2e 66 2c 45 65 3d 53 2e 66 2c Data Ascii: tyNames?Object.getOwnPropertyNames(window):[],me=function(t){try{return de(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):de(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,we=ht.getterFor(ye),Se=Y.f,Ee=S.f,
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 2c 74 29 7c 7c 4a 28 74 68 69 73 2c 67 65 29 26 26 74 68 69 73 5b 67 65 5d 5b 74 5d 29 7c 7c 65 29 7d 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 57 28 74 29 3b 65 3d 66 28 65 2c 21 30 29 3b 69 66 28 74 21 3d 3d 6b 65 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 53 65 28 74 2c 65 29 3b 21 72 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 4a 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 4a 28 69 74 2c 65 29 Data Ascii: ,t)\|\|J(this,ge)&&this[ge][t])\|\|e)},ze=function(t,e){t=W(t);e=f(e,!0);if(t!==ke\|\|!J(Ne,e)\|\|J(Ie,e)){var r=Se(t,e);!r\|\|!J(Ne,e)\|\|J(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)J(Ne,e=r[i++])\|\|J(it,e)
2024-10-02 16:00:41 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 21 50 2c 73 68 61 6d 3a 21 68 7d 2c 7b 63 72 65 61 74 65 3a 71 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 4d 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 44 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 50 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 50 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 46 65 26 26 50 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 50 7c 7c 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 65 28 29 Data Ascii: 0,forced:!P,sham:!h},{create:qe,defineProperty:Me,defineProperties:De,getOwnPropertyDescriptor:ze});Pt({target:"Object",stat:!0,forced:!P},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Fe&&Pt({target:"JSON",stat:!0,forced:!P\|\|d((function(){var t=Ae()

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:40 UTC	651	OUT	GET /collected-forms/v1/config/json?portalId=7302225&utk= HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.wildapricot.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wildapricot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:41 UTC	910	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 16:00:41 GMT Content-Type: application/json;charset=utf-8 Content-Length: 133 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-origin: https://www.wildapricot.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: eefc3c1e-ffe4-46fe-858c-77454535ad4c x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-6c6dd6864-xnv54 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: eefc3c1e-ffe4-46fe-858c-77454535ad4c CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cc5e821bd94032d-MIA
2024-10-02 16:00:41 UTC	133	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 37 33 30 32 32 32 35 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 37 39 38 37 34 36 30 30 30 7d Data Ascii: {"portalId":7302225,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":798746000}

Timestamp	Bytes transferred	Direction	Data
2024-10-02 16:00:41 UTC	537	OUT	GET /7302225.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wildapricot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-02 16:00:41 UTC	587	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 16:00:41 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin x-hubspot-correlation-id: be463625-a51f-4004-9dfc-0f350cb58d2b access-control-allow-credentials: true x-content-type-options: nosniff access-control-max-age: 3600 access-control-allow-origin: https://www.wildapricot.com Last-Modified: Wed, 02 Oct 2024 16:00:24 GMT CF-Cache-Status: HIT Expires: Wed, 02 Oct 2024 16:02:11 GMT Cache-Control: public, max-age=90 Server: cloudflare CF-RAY: 8cc5e8247e8280ca-MIA
2024-10-02 16:00:41 UTC	782	IN	Data Raw: 37 66 39 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 2f 77 65 62 2d 69 6e 74 65 72 61 63 74 69 76 65 73 2d 65 6d 62 65 64 2e Data Ascii: 7f9// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hubspot.com/web-interactives-embed.
2024-10-02 16:00:41 UTC	1266	IN	Data Raw: 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 62 61 6e 6e 65 72 2e 63 6f 6d 2f 76 32 2f 37 33 30 32 32 32 35 2f 62 61 6e 6e 65 72 2e 6a 73 22 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 63 6f 6f 6b 69 Data Ascii: eateElement("script");for(var a in n.src="https://js.hs-banner.com/v2/7302225/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cooki
2024-10-02 16:00:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0