Edit tour

Windows Analysis Report
https://manage.gainapp.com/p/jg9gg5/

Overview

General Information

Sample URL:	https://manage.gainapp.com/p/jg9gg5/
Analysis ID:	1525216
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2168,i,7527110742549341302,4191261803444490188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6208 --field-trial-handle=2168,i,7527110742549341302,4191261803444490188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://manage.gainapp.com/p/jg9gg5/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/event HTTP/1.1Host: plausible.ioConnection: keep-aliveContent-Length: 112sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://manage.gainapp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://gainapp.com/	HTTP Parser: No favicon
Source: https://gainapp.com/	HTTP Parser: No favicon
Source: https://gainapp.com/	HTTP Parser: No favicon
Source: https://gainapp.com/	HTTP Parser: No favicon
Source: https://gainapp.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.64:443 -> 192.168.2.4:52168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.64:443 -> 192.168.2.4:52475 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.64:443 -> 192.168.2.4:52548 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_573.2.dr, chromecache_563.2.dr	String found in binary or memory: ","rating":"5","reviewOrigin":"Capterra","link":"https://www.capterra.com/p/164754/GAIN/reviews/457087/"},{"type":"text","date":"March 16, 2021","author":"Toby R.","roleOrCompany":"Toby Rutter Digital","testimonial":"I have tried a few other apps. The biggest thing I like is how you can customize the approval process, how the posts look similar to how they would on social, and how you can also approve other docs."},{"type":"text","date":"April 30, 2019","author":"Carlos F.","roleOrCompany":"Digital Squad LLC","testimonial":"\"Great app.\""},{"type":"text","author":"Devyn H.","roleOrCompany":"Get Community Inc","testimonial":"\"Looove it!!! Completely seamless and easy to use.\""},{"type":"text","date":"April 30, 2019","author":"Edmaris C.","roleOrCompany":"J. Walter Thompson Worldwide","testimonial":"\"Gain makes our job easier. Clients have a clear view of how the final content will look before we upload it, and it adds structure and organization to the way we manage approvals.\""},{"type":"text","author":"Sarah P.","roleOrCompany":"C & D Advertising","testimonial":"\"We love the collaboration Gain facilitates with our team and our clients. Thank you for always being on the forefront of technology and listening to us (your clients)!\""},{"type":"text","date":"February 4, 2019","author":"Jacki K.","roleOrCompany":"Dental Web Strategies","testimonial":"\"I love it for our clients as it's very visual and intuitive. It's great for clients to be able to see how their posts will look on Facebook.\""},{"type":"text","date":"May 13, 2018","author":"Lena K.","roleOrCompany":"Account Director","testimonial":" equals www.facebook.com (Facebook)
Source: chromecache_454.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),ka=P.length,na=0;na<ka;na++)if(!v&&c(P[na],H.He)){oJ("https://www.youtube.com/iframe_api");v=!0;break}})}}else F(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_353.2.dr, chromecache_305.2.dr, chromecache_454.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_464.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},dk:function(){e=zb()},od:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_464.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_305.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_305.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_464.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={ih:e,gh:f,hh:g,Sh:k,Th:m,Ie:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(VC(w,"iframe_api")\|\|VC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!MC&&TC(x[A],p.Ie))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_433.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_433.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_433.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_464.2.dr	String found in binary or memory: var XB=function(a,b,c,d,e){var f=Oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Oz("fsl","nv.ids",[]):Oz("fsl","ids",[]);if(!g.length)return!0;var k=Tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!By(k,Dy(b, equals www.facebook.com (Facebook)
Source: chromecache_353.2.dr, chromecache_305.2.dr, chromecache_454.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: manage.gainapp.com
Source: global traffic	DNS traffic detected: DNS query: gain-app-prod.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: browser.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: plausible.io
Source: global traffic	DNS traffic detected: DNS query: cdn.headwayapp.co
Source: global traffic	DNS traffic detected: DNS query: ws-us2.pusher.com
Source: global traffic	DNS traffic detected: DNS query: cdn.onesignal.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mxpnl.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: public.profitwell.com
Source: global traffic	DNS traffic detected: DNS query: app.growsurf.com
Source: global traffic	DNS traffic detected: DNS query: sockjs-us2.pusher.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: onesignal.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.pusher.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: api.growsurf.com
Source: global traffic	DNS traffic detected: DNS query: res.cloudinary.com
Source: global traffic	DNS traffic detected: DNS query: gainapp.com
Source: global traffic	DNS traffic detected: DNS query: assets.calendly.com
Source: global traffic	DNS traffic detected: DNS query: beacon-v2.helpscout.net
Source: global traffic	DNS traffic detected: DNS query: tracking.g2crowd.com
Source: global traffic	DNS traffic detected: DNS query: resources-app.encharge.io
Source: global traffic	DNS traffic detected: DNS query: api-js.mixpanel.com
Source: global traffic	DNS traffic detected: DNS query: d3hb14vkzrxvla.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: d33v4339jhl8k0.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: chatapi.helpscout.net
Source: global traffic	DNS traffic detected: DNS query: beaconapi.helpscout.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1727984478&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=wCAj%2FLUWNaUItkYQ1RcpDL%2FP%2FsKiqz%2Frh%2F5JGxta5rk%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1727984478&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=wCAj%2FLUWNaUItkYQ1RcpDL%2FP%2FsKiqz%2Frh%2F5JGxta5rk%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Connection: closeServer: gunicorn/19.1.1Date: Thu, 03 Oct 2024 19:41:18 GMTContent-Type: application/jsonVary: Accept, Cookie, originAllow: GET, HEAD, OPTIONSX-Client-Version: 8X-Frame-Options: DENYContent-Length: 23Strict-Transport-Security: max-age=15768000; includeSubDomainsX-Content-Type-Options: nosniffReferrer-Policy: same-originCross-Origin-Opener-Policy: same-originSet-Cookie: csrftoken=4fhyruNodmeo1kLZ8eLTqKnfVCZEYD2k; expires=Thu, 02 Oct 2025 19:41:18 GMT; Max-Age=31449600; Path=/; SameSite=Lax; SecureVia: 1.1 vegur
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 03 Oct 2024 19:41:29 GMTContent-Type: application/json; charset=utf-8Content-Length: 1116Connection: closeaccess-control-allow-origin: *access-control-expose-headers: X-GRSF-UUID-TOKENx-dns-prefetch-control: offx-frame-options: SAMEORIGINstrict-transport-security: max-age=15724800; includeSubDomainsx-download-options: noopenx-content-type-options: nosniffx-xss-protection: 1; mode=blockx-request-id: 4e593221e5295fe957b111fa6421c8e1x-ratelimit-limit: 100x-ratelimit-remaining: 98x-ratelimit-reset: 1727984548etag: W/"45c-b06iAt1Z353jsniTGHx0Xczk7oo"CF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8ccf68eef8ce177c-EWR

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2168,i,7527110742549341302,4191261803444490188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://manage.gainapp.com/p/jg9gg5/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6208 --field-trial-handle=2168,i,7527110742549341302,4191261803444490188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2168,i,7527110742549341302,4191261803444490188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6208 --field-trial-handle=2168,i,7527110742549341302,4191261803444490188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://tailwindcss.com	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://ns.attribution.com/ads/1.0/	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
browser.sentry-cdn.com	151.101.66.217	true	false	unknown
socket-us2-ingress-1392515755.us-east-2.elb.amazonaws.com	52.14.55.177	true	false	unknown
app.growsurf.com	104.22.21.70	true	false	unknown
d33v4339jhl8k0.cloudfront.net	18.244.20.134	true	false	unknown
api.growsurf.com	104.22.21.70	true	false	unknown
platform.twitter.map.fastly.net	146.75.52.157	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	108.177.15.157	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
t.co	162.159.140.229	true	false	unknown
gainapp.com	76.76.21.21	true	false	unknown
script.hotjar.com	13.227.219.28	true	false	unknown
s-part-0036.t-0009.t-msedge.net	13.107.246.64	true	false	unknown
www.google.com	172.217.23.100	true	false	unknown
beacon-v2.helpscout.net	18.164.52.13	true	false	unknown
tracking.g2crowd.com	104.18.30.176	true	false	unknown
cdn.mxpnl.com	35.186.235.23	true	false	unknown
static-cdn.hotjar.com	18.66.102.53	true	false	unknown
plausible.io	169.150.247.39	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
beaconapi.helpscout.net	54.159.211.38	true	false	unknown
onesignal.com	104.16.160.145	true	false	unknown
clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com	52.201.30.191	true	false	unknown
s.twitter.com	104.244.42.195	true	false	unknown
assets.calendly.com	172.64.146.81	true	false	unknown
api-js.mixpanel.com	35.186.241.51	true	false	unknown
resources-app.encharge.io	104.26.13.72	true	false	unknown
sleepy-tickseed-42pxrmdcf7eo3w5osd2kpdo6.herokudns.com	18.205.36.100	true	false	unknown
dna8twue3dlxq.cloudfront.net	18.239.83.47	true	false	unknown
chatapi.helpscout.net	107.20.206.125	true	false	unknown
d3hb14vkzrxvla.cloudfront.net	52.84.186.135	true	false	unknown
ingress-sticky-haproxy-us2-43bf4e41e061fa0f.elb.us-east-2.amazonaws.com	3.130.121.25	true	false	unknown
s3-w.us-east-1.amazonaws.com	3.5.8.146	true	false	unknown
cdn.onesignal.com	104.16.160.145	true	false	unknown
analytics-alv.google.com	216.239.38.181	true	false	unknown
googleads.g.doubleclick.net	216.58.206.34	true	false	unknown
1529036741.rsc.cdn77.org	195.181.170.19	true	false	unknown
analytics.google.com	172.217.18.14	true	false	unknown
td.doubleclick.net	142.250.181.226	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
stats.pusher.com	unknown	unknown	false	unknown
sockjs-us2.pusher.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
ws-us2.pusher.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
res.cloudinary.com	unknown	unknown	false	unknown
manage.gainapp.com	unknown	unknown	false	unknown
cdn.headwayapp.co	unknown	unknown	false	unknown
public.profitwell.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
gain-app-prod.s3.amazonaws.com	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.53	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
35.186.241.51	api-js.mixpanel.com	United States	15169	GOOGLEUS	false
18.66.102.11	unknown	United States	3	MIT-GATEWAYSUS	false
143.204.215.36	unknown	United States	16509	AMAZON-02US	false
108.177.15.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
146.75.52.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
151.101.130.217	unknown	United States	54113	FASTLYUS	false
54.159.211.38	beaconapi.helpscout.net	United States	14618	AMAZON-AESUS	false
169.150.247.39	plausible.io	United States	2711	SPIRITTEL-ASUS	false
13.32.121.46	unknown	United States	16509	AMAZON-02US	false
18.164.52.13	beacon-v2.helpscout.net	United States	3	MIT-GATEWAYSUS	false
172.67.70.167	unknown	United States	13335	CLOUDFLARENETUS	false
13.32.23.227	unknown	United States	7018	ATT-INTERNET4US	false
151.101.66.217	browser.sentry-cdn.com	United States	54113	FASTLYUS	false
18.239.83.47	dna8twue3dlxq.cloudfront.net	United States	16509	AMAZON-02US	false
76.76.21.21	gainapp.com	United States	16509	AMAZON-02US	false
18.239.94.121	unknown	United States	16509	AMAZON-02US	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
18.239.94.44	unknown	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
104.18.30.176	tracking.g2crowd.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	www.google.com	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
195.181.175.40	unknown	United Kingdom	60068	CDN77GB	false
104.26.13.72	resources-app.encharge.io	United States	13335	CLOUDFLARENETUS	false
104.18.31.176	unknown	United States	13335	CLOUDFLARENETUS	false
130.211.34.183	unknown	United States	15169	GOOGLEUS	false
3.130.121.25	ingress-sticky-haproxy-us2-43bf4e41e061fa0f.elb.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	false
18.244.20.226	unknown	United States	16509	AMAZON-02US	false
216.58.206.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.102.106	unknown	United States	3	MIT-GATEWAYSUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
34.225.161.93	unknown	United States	14618	AMAZON-AESUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false

IP
192.168.2.4
192.168.2.5
192.168.2.16

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525216
Start date and time:	2024-10-03 21:40:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://manage.gainapp.com/p/jg9gg5/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@30/523@174/64
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://gainapp.com/ Browse: http://gainapp.com/ Browse: https://gainapp.com/ebook-guide Browse: https://gainapp.com/google-business-profile Browse: https://gainapp.com/threads

Input	Output
URL: https://manage.gainapp.com/p/jg9gg5/ Model: jbxai	{ "brand":["Gain"], "contains_trigger_text":true, "trigger_text":"But don't worry, you can ask the person who sent you the link to share a new one.", "prominent_button_name":"Explore Gain", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/ Model: jbxai	{ "brand":["gain"], "contains_trigger_text":true, "trigger_text":"Manage more social media clients with less effort. No kidding.", "prominent_button_name":"Try It For Free", "text_input_field_labels":["No credit card required", "Start collaborating in 5 minutes"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/ Model: jbxai	{ "brand":["gain"], "contains_trigger_text":true, "trigger_text":"Manage more social media clients with less effort", "prominent_button_name":"Try It For Free", "text_input_field_labels":["Capterra 4.8", "GetApp 4.8", "Software Advice 4.8"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/ Model: jbxai	{ "brand":["gain"], "contains_trigger_text":true, "trigger_text":"Manage more social media clients with less effort", "prominent_button_name":"Try It For Free", "text_input_field_labels":["Capterra 4.8", "GetApp 4.8", "Software Advice 4.8"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/ Model: jbxai	{ "brand":["gain"], "contains_trigger_text":true, "trigger_text":"Manage more social media clients with less effort", "prominent_button_name":"Try It For Free", "text_input_field_labels":["Capterra 4.8", "GetApp 4.8", "Software Advice 4.8"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/ebook-guide Model: jbxai	{ "brand":["gain"], "contains_trigger_text":true, "trigger_text":"Guide to Streamlining Your Team's Workflow", "prominent_button_name":"Try It For Free", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/ebook-guide Model: jbxai	{ "brand":["gain"], "contains_trigger_text":true, "trigger_text":"Guide to Streamlining Your Team's Workflow", "prominent_button_name":"Try It For Free", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/threads Model: jbxai	{ "brand":["webex", "McCANN", "ROYAL CANN"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get started free", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/google-business-profile Model: jbxai	{ "brand":["Cemex", "Digitas", "Starbucks"], "contains_trigger_text":true, "trigger_text":"The Google Business Profile publishing tool made for agencies and their clients", "prominent_button_name":"Get started free", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gainapp.com/threads Model: jbxai	{ "brand":["webex", "McCANN", "ROYAL CANIN"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get started free", "text_input_field_labels":["Time to pack away"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Name	Malicious	Reputation
https://gainapp.com/clients/brands/ram.svg	false	unknown
https://tracking.g2crowd.com/attribution_tracking/conversions/1010165.js?p=https://gainapp.com/google-business-profile&e=	false	unknown
https://beacon-v2.helpscout.net/	false	unknown
https://gainapp.com/_next/static/css/f9227639dcab8b78.css	false	unknown
https://gainapp.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ffeature-card-publish.53309d0b.png&w=640&q=75	false	unknown
https://gainapp.com/_next/data/oxnaa5eJanbm6SvMcQqCt/features/managing.json	false	unknown
https://gainapp.com/_next/data/oxnaa5eJanbm6SvMcQqCt/linkedin.json	false	unknown
https://gainapp.com/_next/static/chunks/pages/tiktok-1a5b0d4b62dd4d87.js	false	unknown
https://gain-app-prod.s3.amazonaws.com/multipage.68d4f9c1c2978cd78694.js	false	unknown
https://gainapp.com/_next/static/media/features-nav-collaborate.05458364.svg	false	unknown
https://gainapp.com/google-business-profile	false	unknown
https://script.hotjar.com/modules.35ef77a5f94ab0b63bfe.js	false	unknown
https://gainapp.com/clients/agencies/tbwa.svg	false	unknown
https://gainapp.com/_next/static/media/checkmark.ca8555cf.svg	false	unknown
https://resources-app.encharge.io/encharge-tracking.min.js	false	unknown
https://d33v4339jhl8k0.cloudfront.net/users/498114.246606.jpg	false	unknown
https://gain-app-prod.s3.amazonaws.com/img/element-not-found.svg	false	unknown
https://d3hb14vkzrxvla.cloudfront.net/v1/bdd50e9d-d181-4b0a-a26a-a490c3b56d7f	false	unknown
https://beacon-v2.helpscout.net/static/js/main.a4c5e672.js	false	unknown
https://gainapp.com/_next/static/chunks/pages/linkedin-5346d3d14b9faaaf.js	false	unknown
https://gainapp.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ffeature-card-workspaces.3ce56cf2.png&w=640&q=75	false	unknown
https://gainapp.com/_next/static/media/pinterest-logo-square.838c327a.svg	false	unknown
https://gainapp.com/_next/static/media/630dcad0cbacd412-s.p.woff2	false	unknown
https://manage.gainapp.com/api/posts/jg9gg5/public_link_preview/	false	unknown
https://gainapp.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fhero.21a7ea67.png&w=828&q=75	false	unknown
https://gainapp.com/_next/data/oxnaa5eJanbm6SvMcQqCt/instagram.json	false	unknown
https://gainapp.com/_next/static/media/2b3f1035ed87a788-s.p.woff2	false	unknown
https://gainapp.com/_next/data/oxnaa5eJanbm6SvMcQqCt/pinterest.json	false	unknown
https://gainapp.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgrace-profile.5824be9a.png&w=96&q=75	false	unknown
https://static.hotjar.com/c/hotjar-3679693.js?sv=7	false	unknown
https://static.hotjar.com/c/hotjar-3679693.js?sv=6	false	unknown
https://gainapp.com/_next/static/media/getapp-logo.e7134630.svg	false	unknown
https://gainapp.com/_next/static/chunks/pages/google-business-profile-5fcd38532f521963.js	false	unknown
https://gainapp.com/_next/static/chunks/pages/ebook-client-onboarding-244f53ca3def2b38.js	false	unknown
https://gainapp.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fformats.47e7fac0.png&w=384&q=75	false	unknown
https://gainapp.com/_next/static/chunks/pages/features/approving-426defe436b9627d.js	false	unknown
https://gainapp.com/_next/static/media/tiktok-logo-square.a40c6b9f.svg	false	unknown
https://onesignal.com/api/v1/sync/c20e8522-1a88-4653-bbe6-48ec31031f37/web?callback=__jp0	false	unknown
https://gainapp.com/_next/static/media/gain-plus-google.2d4a93ea.svg	false	unknown
https://sockjs-us2.pusher.com/pusher/app/1a2185480a68058fba80/263/di4525h6/xhr_send?t=1727984560400&n=4	false	unknown
https://gainapp.com/_next/static/media/a1b489d74e9003ff-s.p.woff2	false	unknown
https://gainapp.com/_next/static/media/features-nav-manage.706c747d.svg	false	unknown
https://manage.gainapp.com/p/jg9gg5/	false	unknown
https://public.profitwell.com/js/profitwell.js?auth=ffa0b21953d13f82381880643ad0e12d	false	unknown
https://gainapp.com/_next/static/media/box.34783d75.svg	false	unknown
https://beaconapi.helpscout.net/v1/bdd50e9d-d181-4b0a-a26a-a490c3b56d7f/messages/3df2653b-bde7-4804-9fd5-e51c331080ea/events	false	unknown
https://tracking.g2crowd.com/attribution_tracking/conversions/1010165.js?p=https://gainapp.com/ebook-guide&e=	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=534159873434308&ev=PageView&dl=https%3A%2F%2Fgainapp.com%2Fgoogle-business-profile&rl=&if=false&ts=1727984534230&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4126&fbp=fb.1.1727984484350.854729685251437618&ler=empty&cdl=API_unavailable&it=1727984534130&coo=false&rqm=FGET	false	unknown
https://gainapp.com/_next/static/chunks/pages/features/collaborating-022d5a5bbf675de7.js	false	unknown
https://gainapp.com/clients/brands/webex.svg	false	unknown
https://gainapp.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpreviews.965b79ce.png&w=384&q=75	false	unknown
https://gainapp.com/_next/data/oxnaa5eJanbm6SvMcQqCt/threads.json	false	unknown
https://beacon-v2.helpscout.net/static/js/notifications.2d88e2aa.chunk.js	false	unknown
https://gainapp.com/_next/data/oxnaa5eJanbm6SvMcQqCt/google-business-profile.json	false	unknown
https://gainapp.com/_next/static/media/gain-plus-threads.23385e10.svg	false	unknown
https://gainapp.com/_next/static/media/publicis-logo.c1bc32e0.svg	false	unknown
https://beacon-v2.helpscout.net/static/js/full-beacon-init.0314e429.chunk.js	false	unknown
https://tracking.g2crowd.com/attribution_tracking/conversions/1010165.js?p=https://gainapp.com/threads&e=	false	unknown
https://gainapp.com/_next/static/media/threads-logo-square.ea9988ec.svg	false	unknown
https://gainapp.com/videos/approvals-threads-activity.mp4	false	unknown
https://cdn.onesignal.com/sdks/OneSignalSDK.js	false	unknown
https://gainapp.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FimageEditor.458af5f6.png&w=384&q=75	false	unknown
https://gainapp.com/threads	false	unknown
https://gainapp.com/_next/static/media/freeEbook.7d33b64e.svg	false	unknown
https://gainapp.com/clients/brands/isuzu.svg	false	unknown
https://gainapp.com/clients/brands/royalCanin.svg	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.capterra.com/p/164754/GAIN/reviews/1192815/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/1538507/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://gain-app-prod.s3.amazonaws.com/img/apple-touch-icon.png	chromecache_279.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_464.2.dr, chromecache_305.2.dr	false	URL Reputation: safe	unknown
https://tailwindcss.com	chromecache_579.2.dr	false	URL Reputation: safe	unknown
https://www.capterra.com/p/164754/GAIN/reviews/1111611/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/463912/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/271496/	chromecache_372.2.dr, chromecache_577.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/1545974/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://use.typekit.net/af/fff0e7/00000000000000003b9b205f/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_558.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_392.2.dr, chromecache_417.2.dr	false	URL Reputation: safe	unknown
https://www.capterra.com/p/164754/GAIN/reviews/1103610/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/466457/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
http://ns.attribution.com/ads/1.0/	chromecache_326.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_417.2.dr	false	URL Reputation: safe	unknown
https://use.typekit.net/af/fff0e7/00000000000000003b9b205f/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_558.2.dr	false		unknown
https://use.typekit.net/af/18efc2/00000000000000003b9b205e/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_558.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/1784577/	chromecache_372.2.dr, chromecache_577.2.dr	false		unknown
https://res.cloudinary.com/growsurf-prod/image/upload/v1644522070/production/nhdirfadg3bmjnq0ufme.pn	chromecache_549.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/1641217/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://use.typekit.net/af/18efc2/00000000000000003b9b205e/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_558.2.dr	false		unknown
https://connect.facebook.net/	chromecache_571.2.dr, chromecache_433.2.dr	false	URL Reputation: safe	unknown
https://res.cloudinary.com/growsurf-prod/image/upload/v1644522022/production/dciftw0csgifqgro5je8.pn	chromecache_549.2.dr	false		unknown
https://img.onesignal.com/t/2d5f654e-4b22-44e1-9ab4-4d38b04ee2e9.png	chromecache_505.2.dr, chromecache_461.2.dr	false		unknown
https://github.com/js-cookie/js-cookie	chromecache_287.2.dr, chromecache_368.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/1103683/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/457323/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://use.typekit.net/af/dff101/00000000000000003b9b2061/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_558.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/457087/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://use.typekit.net/af/18efc2/00000000000000003b9b205e/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_558.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/457104/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://www.capterra.com/p/164754/GAIN/reviews/1863298/	chromecache_573.2.dr, chromecache_563.2.dr	false		unknown
https://github.com/getsentry/sentry-javascript	chromecache_439.2.dr, chromecache_289.2.dr	false		unknown
https://use.typekit.net/af/6a58f8/00000000000000003b9b2058/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_558.2.dr	false		unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4744
Entropy (8bit):	5.501147768102654
Encrypted:	false
SSDEEP:	96:BOLSxOLzFZMOLlOLB3kOLDOLoVc+u4OLeNBOxTZxOxTkFZMOxTGOxT53kOxT/OxV:kS0lQB3JGSCRZGst53vYlg8
MD5:	622C8B9B9A74FEF14FE0FF29D7143C06
SHA1:	25E04AA19BE18ABFB75CA7960081F423F3E342C8
SHA-256:	59281E56C234B99F06646FB232513834DCAD32D928F0B969F2FB0AE3791C1B0D
SHA-512:	BD2CCF12434BEC642E280E57CE42AABEAD89085F6A643458A3E86B92558D3F21FFAB44DAB362F7C9C7F581887B6BDC0728AA84942B12243617DEB5748D2BE07A
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,600"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.

Timestamp	Bytes transferred	Direction	Data
Oct 3, 2024 21:41:45.021074057 CEST	1509	OUT	GET / HTTP/1.1 Host: gainapp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: mp_02ef99c7b504573395d26ad67427847f_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A19253e6ac841581-0d2ac7e3afc88c-26031e51-140000-19253e6ac841581%22%2C%22%24device_id%22%3A%20%2219253e6ac841581-0d2ac7e3afc88c-26031e51-140000-19253e6ac841581%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _gcl_au=1.1.2117631058.1727984479; _ga_T3L4BEMD4K=GS1.1.1727984481.1.0.1727984481.60.0.0; _ga=GA1.2.1183491269.1727984481; _gid=GA1.2.509222075.1727984482; _gat_UA-37141590-1=1; _fbp=fb.1.1727984484350.854729685251437618; pi2369.grsf.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiODJkYzEzYWYtZTkyYi00ZTM4LWI1N2UtZmJjNjAwOTZjMWZmIiwiaWF0IjoxNzI3OTg0NDg3LCJleHAiOjE [TRUNCATED]
Oct 3, 2024 21:41:45.494848967 CEST	160	IN	HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://gainapp.com/ Refresh: 0;url=https://gainapp.com/ server: Vercel Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e Data Ascii: Redirecting...

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:15 UTC	670	OUT	GET /p/jg9gg5/ HTTP/1.1 Host: manage.gainapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:15 UTC	1060	IN	HTTP/1.1 200 OK Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1727984475&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Bq8%2FhxyjI1RplxGyMFRHMdXW66SA0ObvoQCL5WwYPiI%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1727984475&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Bq8%2FhxyjI1RplxGyMFRHMdXW66SA0ObvoQCL5WwYPiI%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Server: gunicorn/19.1.1 Date: Thu, 03 Oct 2024 19:41:15 GMT Content-Type: text/html; charset=utf-8 X-Client-Version: 8 X-Frame-Options: DENY Vary: Cookie, origin Strict-Transport-Security: max-age=15768000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Set-Cookie: csrftoken=4fhyruNodmeo1kLZ8eLTqKnfVCZEYD2k; expires=Thu, 02 Oct 2025 19:41:15 GMT; Max-Age=31449600; Path=/; SameSite=Lax; Secure Content-Length: 9020 Via: 1.1 vegur
2024-10-03 19:41:15 UTC	126	IN	Data Raw: 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 62 61 73 69 63 20 6d 65 74 61 20 74 61 67 73 20 2d 2d 3e 0a 20 20 20 20 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 61 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 0a 0a 20 20 20 20 0a 20 20 20 20 Data Ascii: <!doctype html><html lang="en" class=""><head> ... basic meta tags --> <title>Gain</title>
2024-10-03 19:41:15 UTC	2372	IN	Data Raw: 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 47 61 69 6e 20 73 70 65 65 64 73 20 75 70 20 63 6f 6c 6c 61 62 6f 72 61 74 69 6f 6e 2c 20 61 75 74 6f 6d 61 74 65 73 20 74 68 65 20 61 70 70 72 6f 76 61 6c 20 77 6f 72 6b 66 6c 6f 77 2c 20 61 6e 64 20 6f 72 67 61 6e 69 7a 65 73 20 61 6c 6c 20 6f 66 20 79 6f 75 72 20 63 6f 6e 74 65 6e 74 20 69 6e 20 6f 6e 65 2c 20 73 61 6e 65 20 70 6c 61 63 65 2e 20 4b 65 65 70 20 79 6f 75 72 20 74 65 61 6d 20 6f 72 67 61 6e 69 7a 65 64 2c 20 79 6f 75 72 20 63 6c 69 65 6e 74 73 20 68 61 70 70 79 2c 20 61 6e 64 20 79 6f 75 72 20 62 72 61 6e 64 73 20 73 61 66 65 2e 22 20 2f 3e 0a 20 20 20 20 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e Data Ascii: <meta name="description" content="Gain speeds up collaboration, automates the approval workflow, and organizes all of your content in one, sane place. Keep your team organized, your clients happy, and your brands safe." /> <meta charset="utf-8">
2024-10-03 19:41:15 UTC	3558	IN	Data Raw: 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 0a 0a 20 20 20 20 3c 21 2d 2d 20 48 65 61 64 77 61 79 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 2f 2f 63 64 6e 2e 68 65 61 64 77 61 79 61 70 70 2e 63 6f 2f 77 69 64 67 65 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 4f 6e 65 53 69 67 6e 61 6c 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6f 6e 65 73 69 67 6e 61 6c 2e 63 6f 6d 2f 73 64 6b 73 2f 4f 6e 65 53 69 67 6e 61 6c 53 44 4b 2e 6a 73 22 20 61 73 79 6e 63 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 4f 6e 65 53 69 67 6e 61 6c 20 3d 20 77 69 6e 64 6f 77 2e Data Ascii: "></script> ... Headway --> <script async src="//cdn.headwayapp.co/widget.js"></script> ... OneSignal --> <script src="https://cdn.onesignal.com/sdks/OneSignalSDK.js" async=""></script> <script> var OneSignal = window.
2024-10-03 19:41:15 UTC	2964	IN	Data Raw: 63 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 63 61 6c 6c 32 5f 61 72 67 73 20 3d 20 61 72 67 75 6d 65 6e 74 73 3b 20 63 61 6c 6c 32 20 3d 20 5b 63 5d 2e 63 6f 6e 63 61 74 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 63 61 6c 6c 32 5f 61 72 67 73 2c 20 30 29 29 3b 20 61 2e 70 75 73 68 28 5b 65 2c 20 63 61 6c 6c 32 5d 29 3b 20 7d 3b 20 7d 20 66 6f 72 20 28 20 76 61 72 20 64 20 3d 20 7b 7d 2c 20 65 20 3d 20 5b 22 67 65 74 5f 67 72 6f 75 70 22 5d 2e 63 6f 6e 63 61 74 28 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 20 30 29 29 2c 20 63 20 3d 20 30 3b 20 63 20 3c 20 6a 2e 6c 65 6e 67 74 68 3b 20 63 2b 2b 29 20 62 28 6a 5b 63 5d 29 3b 20 72 65 Data Ascii: c] = function () { call2_args = arguments; call2 = [c].concat(Array.prototype.slice.call(call2_args, 0)); a.push([e, call2]); }; } for ( var d = {}, e = ["get_group"].concat( Array.prototype.slice.call(arguments, 0)), c = 0; c < j.length; c++) b(j[c]); re

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:16 UTC	542	OUT	GET /multipage.68d4f9c1c2978cd78694.css HTTP/1.1 Host: gain-app-prod.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:16 UTC	450	IN	HTTP/1.1 200 OK x-amz-id-2: Z89EilZwP5LfgLzQzn7fYbBsUgSp+kBd9iQPelySen2wunEQ/g6XfCQvKU7+4E9N76d9YqnjBfHMmRg0HMAsyg== x-amz-request-id: 12QCGYCBBSM5Q4D0 Date: Thu, 03 Oct 2024 19:41:17 GMT Last-Modified: Wed, 02 Oct 2024 23:16:17 GMT ETag: "45151f41dbe6d9521600dbbd2e520d11" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Accept-Ranges: bytes Content-Type: text/css Server: AmazonS3 Content-Length: 67792 Connection: close
2024-10-03 19:41:16 UTC	15843	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ec bd 5b 8f e5 3a 96 26 f6 3e bf 22 a7 db 0d 9c d3 8e 9d a5 eb be 64 c2 9e 19 0c 30 c0 00 36 e0 07 1b 70 a3 5d 0f 94 44 c5 d6 09 6d 49 a5 4b 44 46 1e e7 7f 37 29 89 14 17 f5 2d c5 a9 9a 9a 29 77 f7 a9 46 9f 8c 4d 7e 5c e2 9d 8b 8b eb f2 87 7f fc f7 9f 9a b6 7f 88 ba fa 2e 3f e7 c3 f0 e9 35 fe 1c 7c 8e 3f fd bf 9f fe f7 ff fa 7f 7e fa df aa 5c 36 83 54 bf 9e ab f1 3e 65 9f f3 f6 f1 87 46 e6 6d 2d 86 3f d0 72 ff f8 87 fb f8 a8 7f 2d db 66 3c 95 e2 51 d5 ef 5f 06 d1 0c a7 41 f6 55 f9 f5 f4 18 4e a3 fc 36 9e 06 85 3f 89 e2 97 69 18 bf 84 41 f0 0f 5f 4f 6f 32 7b a9 46 9c fb 23 6b 8b f7 5f 1f a2 7f ae 9a 2f c1 0f d1 8f 55 5e cb 27 31 54 85 7c 2a e4 28 aa 7a 78 2a ab e7 5c 74 63 d5 36 fa cf a9 97 4f 65 db 8e b2 7f ba 4b 51 e8 7f 9e Data Ascii: [:&>"d06p]DmIKDF7)-)wFM~\.?5\|?~\6T>eFm-?r-f<Q_AUN6?iA_Oo2{F#k_/U^'1T\|(zx\tc6OeKQ
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: b3 9f 68 a1 c3 e1 c0 28 0c 2d 2e 2a b8 e8 56 46 31 6c 45 8d 82 f9 9a d9 7d 5b 51 9f a0 29 b9 e2 b0 cc 44 6c d5 28 cc 17 8b 51 52 db 1b 93 01 05 9f 81 53 9a 09 1f 95 18 96 79 06 cd 22 ce 7b 8b 75 eb 6d eb db 6e c2 2e 4d cf 46 73 eb b9 17 c5 b4 44 64 cf 45 47 7d f4 f7 3a 18 38 c7 2d 86 76 25 a8 2f b4 dd 9d 71 a8 94 6d a8 8e 11 76 9f 2d 02 c7 e3 30 ba 28 33 e0 60 e2 85 37 db 26 39 cf d1 f1 8e d6 b0 89 cf e4 a2 16 67 04 70 a6 9a 25 d2 57 85 8d 1b 64 cc a1 a0 78 c4 5c 5c e6 12 11 44 9c 5d 04 c7 de 84 96 17 d2 b0 04 22 ae 0e 22 85 88 9b 83 58 dc 08 f6 f8 86 50 38 c0 63 5f 87 c1 56 2f 68 da 9f da 65 a5 01 cc 33 95 b4 06 25 0b ea 0e 05 06 d6 c8 40 81 ba 7d b5 cc 38 40 e6 f9 5a 38 45 9d 98 40 64 af 0a 03 0f 74 e4 ae 31 09 43 07 cd 05 f4 b9 38 0d 5b 51 47 0e 52 2e Data Ascii: h(-.*VF1lE}[Q)Dl(QRSy"{umn.MFsDdEG}:8-v%/qmv-0(3`7&9gp%Wdx\\D]""XP8c_V/he3%@}8@Z8E@dt1C8[QGR.
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: 7f 62 67 ff b1 ea 00 fa 90 4b 88 77 7f 28 0e 87 b4 dc 66 71 0e b5 de f3 16 fe 50 9c 1e 85 2a 6d 14 78 41 20 06 25 22 fe 8d 47 7f 3c 6e a7 0c e2 c3 c7 7d 51 d5 e3 8f 3c 8a ff 65 32 e1 cc 8e c1 70 a3 2b 6e 59 70 e4 91 2d f2 51 e4 79 23 3f 3d 7c f0 47 df 19 d3 9a 8f 7e 2f e0 be 7b 12 73 62 b5 b7 e9 45 fe 74 c8 d8 76 d4 a1 ff 5b 81 af 05 48 55 3f 8a c5 e3 3d 34 5f a4 ac cb 7a 6b 7e 4f b2 ea 94 f3 cd c3 9f a6 d6 55 b9 fd 78 2e f3 77 80 8a 5b ee d1 c8 ae 8f 93 53 59 24 d3 2a 9c b2 53 f8 a7 e2 18 df 57 02 33 bc 85 ea 83 70 f8 e5 7d 4e 58 ab d3 fb 62 b7 0b de 8f 9a 78 1d ef be 13 bf 7e f7 7e fc c2 56 eb 7a d7 b6 59 97 67 61 28 fc dd 7b e9 6d cc c1 38 81 6f 06 23 a6 45 83 68 22 0a 0c 83 8e 71 93 ea e7 58 f0 5c c0 a8 3a 59 1e bd 33 cf 3b 3d a0 96 a9 60 15 28 2c 13 Data Ascii: bgKw(fqPmxA %"G<n}Q<e2p+nYp-Qy#?=\|G~/{sbEtv[HU?=4_zk~OUx.w[SY$SW3p}NXbx~~VzYga({m8o#Eh"qX\:Y3;=`(,
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: e6 1e 7f 9b 8a 14 23 b6 6b fc 94 e2 1e 7f ea c8 28 33 91 14 8e a7 29 40 cd 1e c0 14 66 5b 55 21 ea fe b5 6d cb 89 f5 09 c1 59 7b 2b 2c c3 76 59 85 b3 24 d9 52 d2 38 13 a1 20 89 01 c2 a4 c3 c7 02 25 ba 39 bc 77 27 31 bb 09 1f 0a e2 21 c1 83 00 62 3c 3d f5 f6 bc 41 39 93 0f 01 ca d3 f4 27 3c 86 10 e8 83 93 34 cf b6 19 1e a9 c2 07 a7 06 c6 25 f3 e2 31 29 50 8f 2c f0 42 4f d2 ea d3 09 5d b9 10 5c af 19 ef 43 27 be 55 c5 4c 08 a9 f1 94 bf 3e 78 8e 25 7b 34 5f 59 1b 93 3d e6 41 7f 62 14 c6 57 71 db 6f d1 f9 ce cd b8 ee c5 36 45 ef 38 61 db 10 13 34 50 e1 20 04 eb 34 01 42 d8 d5 87 20 a6 26 c5 76 8f 4a 35 21 48 a8 0c 02 37 0b 09 c1 2a 21 29 e3 5d 1d d0 91 e6 43 78 18 4d ca 6c 83 87 3a 65 57 06 40 72 59 9c 70 c7 75 1f 54 0d 49 79 26 44 1e 30 ac 49 1e e3 1c a7 19 Data Ascii: #k(3)@f[U!mY{+,vY$R8 %9w'1!b<=A9'<4%1)P,BO]\C'UL>x%{4_Y=AbWqo6E8a4P 4B &vJ5!H7*!)]CxMl:eW@rYpuTIy&D0I
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: 97 6f ff 24 ed 9a de 18 2b 63 75 aa 6f 42 cc 79 22 47 ff cb e0 38 4f bf 95 4e 58 5b f9 c0 22 dd b1 78 f8 6b 7e 08 57 eb aa dc 5e 63 45 c7 1b a9 3e f0 ea e2 10 af 26 ff 9a de 9e f3 b8 9c a6 45 fd fe 35 1b fb 75 96 ee b2 87 f7 23 7e 3d 8f eb 77 df a5 07 26 43 25 69 32 29 4e 0c 91 8f a7 f4 bb f7 e3 d7 e8 ea be d8 ed da 5e f8 6f af d4 70 5d 6b ed d6 e5 39 6d 06 fd 34 55 b0 17 22 7c 6c 87 15 a7 cc ac c0 03 a5 da 59 47 18 43 4c 85 17 19 e2 be a7 ba 04 d7 d0 f6 83 15 36 d5 f5 dc 6b 49 c5 16 99 dd 21 39 92 4f 4b e7 02 f6 c0 4e 92 bd 88 b1 72 ac 33 06 c7 86 9c 34 c4 5e 54 0f 36 cc 6d 19 3f 0a 67 3d 6d fc 13 56 1e e7 79 5a d5 9d ef 85 c2 96 d7 ae 64 27 0b 33 6a cc ac 1a dc 14 e1 7c b8 74 bc 10 f9 4b ab 0a 5b f4 5b e3 45 d4 b7 6b 18 e0 0c 55 65 fc 27 ab 4e 18 74 d6 Data Ascii: o$+cuoBy"G8ONX["xk~W^cE>&E5u#~=w&C%i2)N^op]k9m4U"\|lYGCL6kI!9OKNr34^T6m?g=mVyZd'3j\|tK[[EkUe'Nt
2024-10-03 19:41:16 UTC	11800	IN	Data Raw: 12 7b f6 d6 11 39 14 8f 04 e9 ce 29 60 aa 79 7f ee 13 35 48 cc 7b b6 b8 98 e3 d2 9e 67 df 2e 38 1c 4d 24 d6 0e cd 8b db 62 c8 cd 96 ad 4b c6 8e 3f 54 7c f6 6c 19 95 5f 81 7f 97 e7 ff 9a a2 7c d2 0b ad b5 21 c8 d4 81 a2 51 65 f3 1d e1 42 83 4d cb a6 37 01 f8 07 29 1a 61 db df 3e 57 44 85 bf 67 32 1f 4e 19 a1 3b 37 06 ff 0f a4 c6 23 b4 31 c7 2d a6 b1 35 0e 6d b8 aa 8a f1 15 b6 8f cd 43 91 b0 3b 7e 8d 4b ca 4b 1b 1f 84 f2 c4 b7 c5 a6 63 7a 5f d1 7b c9 6a f5 58 d4 d9 8e 9d b0 a4 2c 69 eb 46 8c 0a 1d 3b a4 ab 9f bf cf 2a 9e a1 1d a7 40 6b 6b 9d e2 33 be fc 36 61 9d d2 92 cb 35 27 92 8f 84 f6 b5 90 d5 a8 70 25 93 4d e0 a7 b4 38 a1 fa 36 7f 61 31 be d3 be a8 8b 21 1c f2 94 1d 8f c4 8e b1 08 aa 51 7b 23 08 b0 d6 fd 54 e0 32 a5 4d c8 1c ee f7 e8 65 ce 5f 59 ab 76 Data Ascii: {9)`y5H{g.8M$bK?T\|l_\|!QeBM7)a>WDg2N;7#1-5mC;~KKcz_{jX,iF;*@kk36a5'p%M86a1!Q{#T2Me_Yv
2024-10-03 19:41:16 UTC	5333	IN	Data Raw: b6 78 c8 17 0d d2 92 0e b7 2f e4 4e 47 43 65 d7 52 9e 3e ef 1c ee 41 f1 71 44 59 11 b4 6c 4e 36 62 0a 8a 4e 03 6b d1 b7 7a d9 39 0e f6 2e de a5 cc b5 65 6e 98 70 d0 f9 d7 cb b3 49 f6 69 e4 c6 55 51 bc 46 6e 2f e1 f5 6c b6 19 d9 2a ee 1f 32 aa 59 89 d4 0b a8 8c 14 af 94 6d c9 0d eb 96 70 c6 48 b5 f5 24 da 5c af 6d 35 c9 4e 7c 4d 86 77 8b b6 37 9b ad 26 d6 0e aa 31 d0 7d cd 4c 11 af a4 19 dd c9 4a fc 40 32 2b f1 d1 a6 82 54 83 05 63 4f 43 7a f9 25 a3 4b cf b5 4f 14 dd 49 14 95 25 5d 5b 60 81 0d c7 ec 9a 86 97 a5 16 ba 32 8e 1e bf cd ed 77 47 24 0c 14 49 96 1c b5 39 2c e9 24 9d a5 6b c8 1e 4c 74 46 f8 ba 16 04 35 2f cf 73 2e d5 21 90 f9 ce a8 3c d8 8c f6 bc a1 40 53 1e 81 9a 67 85 06 e0 b2 96 1d 1a c8 72 a1 ba 69 86 6e cc 1f e4 e6 d8 64 8e 19 7b 2f 8e de 9a Data Ascii: x/NGCeR>AqDYlN6bNkz9.enpIiUQFn/l*2YmpH$\m5N\|Mw7&1}LJ@2+TcOCz%KOI%][`2wG$I9,$kLtF5/s.!<@Sgrind{/

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:16 UTC	538	OUT	GET /4.5.3/bundle.min.js HTTP/1.1 Host: browser.sentry-cdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://manage.gainapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:16 UTC	547	IN	HTTP/1.1 200 OK Connection: close Content-Length: 71251 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Sep 2025 07:56:20 GMT Last-Modified: Mon, 21 Jan 2019 13:03:48 GMT ETag: W/"28e5dd38e927f10c1ce94d84470a83b3" Content-Type: application/javascript; charset=utf-8 X-GUploader-Response-Body-Transformations: gunzipped Accept-Ranges: bytes Age: 1424696 Date: Thu, 03 Oct 2024 19:41:16 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: * Server: Fastly Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 34 2e 35 2e 33 20 28 31 34 66 37 35 37 63 65 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 28 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f Data Ascii: /! @sentry/browser 4.5.3 (14f757ce) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){"use strict";var e=function(t,n){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){fo
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 30 2c 6f 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 6f 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 6f 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 61 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 61 2e 6c 61 62 65 6c 2b 2b 2c 72 3d 69 5b 31 5d 2c 69 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 69 3d 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 6f 3d 28 6f 3d 61 2e 74 72 79 73 29 2e 6c 65 6e 67 74 68 3e 30 26 26 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 28 36 3d 3d 3d 69 5b 30 5d 7c 7c 32 3d 3d 3d 69 5b 30 5d 29 Data Ascii: 0,o&&(i=[2&i[0],o.value]),i[0]){case 0:case 1:o=i;break;case 4:return a.label++,{value:i[1],done:!1};case 5:a.label++,r=i[1],i=[0];continue;case 7:i=a.ops.pop(),a.trys.pop();continue;default:if(!(o=(o=a.trys).length>0&&o[o.length-1])&&(6===i[0]\|\|2===i[0])
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 72 72 6f 72 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d Data Ascii: (t)}function h(t){return"[object DOMError]"===Object.prototype.toString.call(t)}function d(t){return void 0===t}function v(t){return"function"==typeof t}function g(t){return"[object String]"===Object.prototype.toString.call(t)}function m(t){return null===
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 65 3d 74 2e 6d 61 74 63 68 28 2f 5e 28 28 5b 5e 3a 5c 2f 3f 23 5d 2b 29 3a 29 3f 28 5c 2f 5c 2f 28 5b 5e 5c 2f 3f 23 5d 2a 29 29 3f 28 5b 5e 3f 23 5d 2a 29 28 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 23 28 2e 2a 29 29 3f 24 2f 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 3d 65 5b 36 5d 7c 7c 22 22 2c 72 3d 65 5b 38 5d 7c 7c 22 22 3b 72 65 74 75 72 6e 7b 68 6f 73 74 3a 65 5b 34 5d 2c 70 61 74 68 3a 65 5b 35 5d 2c 70 72 6f 74 6f 63 6f 6c 3a 65 5b 32 5d 2c 72 65 6c 61 74 69 76 65 3a 65 5b 35 5d 2b 6e 2b 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 29 7b 69 66 28 74 2e 6d 65 73 73 61 67 65 29 72 65 74 75 72 6e 20 74 2e 6d 65 73 73 61 67 65 3b 69 66 28 74 2e 65 78 63 65 70 74 69 6f 6e 26 26 74 2e 65 78 63 Data Ascii: return{};var e=t.match(/^(([^:\/?#]+):)?(\/\/([^\/?#]))?([^?#])(\?([^#]))?(#(.))?$/);if(!e)return{};var n=e[6]\|\|"",r=e[8]\|\|"";return{host:e[4],path:e[5],protocol:e[2],relative:e[5]+n+r}}function w(t){if(t.message)return t.message;if(t.exception&&t.exc
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 2e 53 75 63 63 65 73 73 3a 34 32 39 3d 3d 3d 65 3f 74 2e 52 61 74 65 4c 69 6d 69 74 3a 65 3e 3d 34 30 30 26 26 65 3c 35 30 30 3f 74 2e 49 6e 76 61 6c 69 64 3a 65 3e 3d 35 30 30 3f 74 2e 46 61 69 6c 65 64 3a 74 2e 55 6e 6b 6e 6f 77 6e 7d 7d 28 74 2e 53 74 61 74 75 73 7c 7c 28 74 2e 53 74 61 74 75 73 3d 7b 7d 29 29 3b 76 61 72 20 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 68 61 73 57 65 61 6b 53 65 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 53 65 74 2c 74 68 69 73 2e 69 6e 6e 65 72 3d 74 68 69 73 2e 68 61 73 57 65 61 6b 53 65 74 3f 6e 65 77 20 57 65 61 6b 53 65 74 3a 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 6d 6f 69 7a 65 3d 66 75 6e 63 74 69 6f Data Ascii: .Success:429===e?t.RateLimit:e>=400&&e<500?t.Invalid:e>=500?t.Failed:t.Unknown}}(t.Status\|\|(t.Status={}));var O=function(){function t(){this.hasWeakSet="function"==typeof WeakSet,this.inner=this.hasWeakSet?new WeakSet:[]}return t.prototype.memoize=functio
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 54 28 74 2c 34 30 29 3a 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 65 3f 22 5b 4f 62 6a 65 63 74 5d 22 3a 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 65 3f 22 5b 41 72 72 61 79 5d 22 3a 4d 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 65 29 7b 69 66 28 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 4c 28 74 29 3b 69 66 28 79 28 74 29 29 7b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 74 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 50 28 72 5b 74 5d 2c 65 2d 31 29 Data Ascii: e=Object.prototype.toString.call(t);return"string"==typeof t?T(t,40):"[object Object]"===e?"[Object]":"[object Array]"===e?"[Array]":M(t)}function P(t,e){if(0===e)return L(t);if(y(t)){var n={},r=t;return Object.keys(r).forEach(function(t){n[t]=P(r[t],e-1)
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 72 63 75 6c 61 72 20 7e 5d 22 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 74 5b 6e 5d 3d 41 28 74 5b 6e 5d 2c 65 29 3b 65 2e 75 6e 6d 65 6d 6f 69 7a 65 28 74 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 6e 6f 72 6d 61 6c 69 7a 65 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 4d 28 41 28 6e 29 2c 65 29 3a 41 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2c 48 28 7b 6e 6f 72 6d 61 6c 69 7a 65 3a 21 30 7d 29 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 Data Ascii: rcular ~]";for(var n in t)t[n]=A(t[n],e);e.unmemoize(t)}return t}function H(t){return void 0===t&&(t={normalize:!0}),function(e,n){return t.normalize?M(A(n),e):A(n)}}function $(t){try{return JSON.parse(JSON.stringify(t,H({normalize:!0})))}catch(t){return"
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 2e 65 72 72 6f 72 7d 72 65 74 75 72 6e 5b 37 5d 3b 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 5b 32 2c 6f 5d 7d 7d 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 55 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 73 65 72 3d 24 28 74 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 63 6f 70 65 4c 69 73 74 65 6e 65 72 73 28 29 2c 74 68 69 73 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 67 73 3d 69 28 7b 7d 2c 74 68 69 73 2e 74 61 67 73 2c 28 28 6e 3d 7b 7d 29 5b 74 5d 3d 24 28 65 29 2c 6e 29 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 Data Ascii: }finally{if(n)throw n.error}return[7];case 10:return[2,o]}})})},t.prototype.setUser=function(t){return this.user=$(t),this.notifyScopeListeners(),this},t.prototype.setTag=function(t,e){var n;return this.tags=i({},this.tags,((n={})[t]=$(e),n)),this.notifyS
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 26 21 74 2e 66 69 6e 67 65 72 70 72 69 6e 74 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 74 2e 66 69 6e 67 65 72 70 72 69 6e 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 54 6f 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 78 74 72 61 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 65 78 74 72 61 29 2e 6c 65 6e 67 74 68 26 26 28 74 2e 65 78 74 72 61 3d 69 28 7b 7d 2c 74 68 69 73 2e 65 78 74 72 61 2c 74 2e 65 78 74 72 61 29 29 2c 74 68 69 73 2e 74 61 67 73 26 26 4f 62 6a 65 63 74 Data Ascii: &!t.fingerprint.length&&delete t.fingerprint},t.prototype.applyToEvent=function(t,e,n){return a(this,void 0,void 0,function(){return s(this,function(r){return this.extra&&Object.keys(this.extra).length&&(t.extra=i({},this.extra,t.extra)),this.tags&&Object
2024-10-03 19:41:16 UTC	1379	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 74 68 69 73 2e 65 6e 61 62 6c 65 64 26 26 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 56 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 6e 74 72 79 20 4c 6f 67 67 65 72 20 5b 45 72 72 6f 72 5d 3a 20 22 2b 74 2e 6a 6f 69 6e 28 22 20 22 29 29 7d 29 7d 2c 74 7d 28 29 29 2c 47 3d 33 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 6e 65 77 20 57 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 47 29 2c 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 6e 2c 74 68 69 73 2e 73 74 61 63 6b 3d 5b 5d 2c 74 68 69 73 2e 73 74 61 63 6b 2e 70 75 73 68 28 7b 63 6c 69 65 6e 74 3a 74 2c Data Ascii: ents.length;e++)t[e]=arguments[e];this.enabled&&k(function(){V.console.error("Sentry Logger [Error]: "+t.join(" "))})},t}()),G=3,X=function(){function t(t,e,n){void 0===e&&(e=new W),void 0===n&&(n=G),this.version=n,this.stack=[],this.stack.push({client:t,

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:16 UTC	548	OUT	GET /vendors~multipage~singlepage-0.68d4f9c1c2978cd78694.js HTTP/1.1 Host: gain-app-prod.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:16 UTC	458	IN	HTTP/1.1 200 OK x-amz-id-2: fWBuy/zIHFLMC9pB9j+zsMM7bPkA0eda3yM1F8EpSo+eCZQ++9zS759nDYINSFcaenTCMHq6Vfg7OsZws2oweA== x-amz-request-id: 12QFGGPW1XV0H5RA Date: Thu, 03 Oct 2024 19:41:17 GMT Last-Modified: Wed, 02 Oct 2024 23:16:16 GMT ETag: "1321b38e555c730c5be82f401e03701a" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Accept-Ranges: bytes Content-Type: text/javascript Server: AmazonS3 Content-Length: 710166 Connection: close
2024-10-03 19:41:16 UTC	1500	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ec 7d 7b 7f d3 b8 d2 f0 ff ef a7 48 fd 5b 7a 6c a2 a6 49 29 05 9c 9a 3c 2c a5 d0 5d ba b0 b4 bb 5c 42 0e 3f 37 51 1a 43 62 67 6d a7 6d a8 73 3e fb 3b 33 ba 58 76 9c b4 e5 5c 9e e7 bd 70 89 75 19 8d 6e a3 99 91 34 92 b6 ef 6f d4 0e a3 b8 36 0e fa 3c 4c 78 2d 08 87 51 3c f1 d3 20 0a 6b d3 31 f7 21 28 e1 bc 76 c1 c3 41 14 27 ff 98 cc c6 69 30 f5 cf f9 3f 92 20 3c 1f 73 74 6e 35 1b 7b 8f 07 bb c3 27 fd 56 7f e7 c9 a3 c7 fd c1 a3 c7 7b 4f 76 1b 5f 93 c6 eb a3 e7 2f 7e 3b 79 51 bb bf fd bf ec cb 00 50 5c 36 2e f9 d9 d4 ef 7f fb 25 89 c2 a9 57 11 96 65 dd 9e d3 98 ce 92 91 dd ed 36 7b ac 3b 9c 85 7d 2c 8e cd 59 ca 42 e7 da 9a 61 99 d2 38 e8 a7 56 3b 6c 0c ec 94 59 be c5 6c 0d e7 5c c7 3c 9d c5 61 2d 5a 38 0e 93 10 67 95 10 be 01 d1 Data Ascii: }{H[zlI)<,]\B?7QCbgmms>;3Xv\pun4o6<Lx-Q< k1!(vA'i0? <stn5{'V{Ov_/~;yQP\6.%We6{;},YBa8V;lYl\<a-Z8g
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: 0c 02 af b2 c1 3c e3 83 73 4e 4d 01 d8 2f 44 95 78 88 dd fe 33 d0 d4 39 0c 6a e0 5b 1c ff 83 0e 10 62 ae 20 13 80 47 f8 e3 77 92 6e 93 77 6a 5c 43 45 c7 f4 f3 06 05 13 50 11 ba a9 dd 86 d4 24 f2 03 09 a5 4b 34 f3 10 d8 df e0 b9 a0 65 74 ea d4 28 f5 89 00 87 d0 36 87 fe 24 18 cf c9 79 82 23 42 39 9e 0d be ce 60 54 91 37 05 1d aa 3f 92 ee b9 4c f8 a7 1f 07 d8 3a e8 7e 2f fa 5a 68 d2 20 06 22 90 23 90 eb 55 36 9c 67 e7 ad ec 7c 27 3b 1f cf a7 23 22 40 72 81 58 83 3a 53 b3 bc 8a e2 e0 3b e0 f0 c7 4b 51 7f c2 c0 0b fa 2a 02 87 d6 39 f2 44 88 26 39 4f f2 4a 85 88 3a 8f 80 05 21 1d 8c 10 e9 b3 c1 c5 07 e1 12 52 f4 03 48 16 1e 41 82 e9 08 86 4c 30 01 55 3e a7 1c a0 e2 20 dc 21 71 13 93 9e f2 2d fb d6 ca be ed 64 df 1e 64 df 76 41 de c4 21 1f 1f fb 30 78 ae a4 07 Data Ascii: <sNM/Dx39j[b Gwnwj\CEP$K4et(6$y#B9`T7?L:~/Zh "#U6g\|';#"@rX:S;KQ*9D&9OJ:!RHAL0U> !q-ddvA!0x
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: ab 27 b4 2f ec 08 80 c4 d5 18 6e de cd 29 bd e6 3d b4 41 ce 07 5e df 8e d4 9b 27 ce d3 27 cd e6 a3 d6 93 27 3b 0f 77 1f ed 36 9f 3c 69 39 62 36 78 0a 63 40 ce 06 8f fd ab 60 32 9b d4 60 18 44 97 f4 e2 f1 80 5f d5 f8 55 9f f3 01 1f 58 ea b1 94 66 3b dc 0f da 61 bd ce 06 50 14 b2 a4 89 36 37 67 f6 90 0d 58 84 c6 34 64 4b 4c 85 78 ea fd 0b 72 25 cc 90 5b a4 4e 03 d7 d4 fb 5e 20 da 86 b7 a7 66 a4 d4 c0 bb be 0c 06 e9 c8 bd 86 7e 9b f2 38 9d bb 16 05 80 16 4b 2c d2 4a 80 09 81 94 4b 63 3f 4c 50 73 74 2b 39 8e e0 83 a0 70 0f 1c 3b 85 a1 b7 51 b1 93 50 61 d7 b9 a1 0e 1d 2d e8 b5 0c 0e 23 94 bb 78 cf 13 af 5b f7 70 8d 9d 8d 78 70 3e 4a cd e2 89 90 52 f9 16 78 56 f7 7d b9 26 2a ac 0a f8 d5 12 62 1d b8 0c ee 5f 2d e3 96 61 55 c0 15 b8 55 e0 12 38 7e 35 64 c0 13 b7 Data Ascii: '/n)=A^''';w6<i9b6xc@`2`D_UXf;aP67gX4dKLxr%[N^ f~8K,JKc?LPst+9p;QPa-#x[pxp>JRxV}&*b_-aUU8~5d
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: 77 fb 04 26 11 84 c9 3b 69 94 70 33 8c 43 94 85 28 0c a0 18 85 ba 10 ab 02 09 42 64 53 88 17 41 e2 d9 a5 42 7d 4f 1c f6 c6 fb c6 be dc 4e e1 7c 01 8d 6c d4 ec fb 11 ce f3 4d fe 27 42 74 73 a3 37 e8 13 d9 a4 45 bd 20 8d d6 ab 83 5f 94 3a 18 97 c5 72 5c 9c 92 ae 4b 7b 56 21 9d 0b 72 79 6d ea 71 49 20 8e 4d 51 b8 2e e5 82 3d 2f b4 f1 0b 87 9d 7a cf d9 b3 db b5 f1 5b ef ae eb 10 ec b8 b4 a4 8a 4b 63 6f 0d 73 c9 f2 4a 07 17 26 77 a1 c7 f7 f1 ed 5a e3 76 09 73 92 4d c0 81 71 d8 f4 ad 1d 39 9d e8 be 1d d2 53 8a f8 b6 b9 b5 65 d5 23 37 5a b0 03 3c f2 7e d0 98 f8 f1 79 80 0f ea d1 b7 b8 98 80 21 e5 e6 cb 57 68 8e 8b 4d f9 4c 75 82 48 57 52 2a 75 e0 8f e2 7b b7 bc d6 a1 83 7f 14 e7 b2 2a 68 86 ff 28 d6 b2 56 96 87 fe 28 c6 b2 d2 66 62 2c b4 43 ef 07 33 f8 58 99 81 Data Ascii: w&;ip3C(BdSAB}ON\|lM'Bts7E _:r\K{V!rymqI MQ.=/z[KcosJ&wZvsMq9Se#7Z<~y!WhMLuHWRu{h(V(fb,C3X
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: c3 b1 1c fc fe 77 da ac d4 eb e4 61 c3 3b ed e6 5f a0 c5 31 7d 43 9b 4e c6 2b 4c fa 8a f3 6c 99 46 26 81 1a 25 6e 30 46 a6 63 b7 1e 86 99 20 a2 cb b3 6d 00 96 3f e8 af 3d 9c 69 83 68 dd 61 d4 91 4d f6 1a e5 99 34 6c ea 98 69 6a e2 26 51 5a f3 a2 de f3 88 0e 81 91 49 0c 75 64 80 18 95 52 1a 43 10 6d 71 8d 30 d3 f0 af 58 6d 2f d5 7b b5 dc c2 b6 85 4b 66 22 a6 69 b2 37 33 db b3 33 da 26 35 cb f0 5b f5 8e 2a fc 6d 3a 37 f1 1e 08 6b 41 dc c3 6e d5 5b 5b 19 6a da 76 1f da 2b a7 46 a1 cf 2d dc b3 72 3e 71 56 8d 4a 9a f7 9d 38 3d 53 ce d6 ab 7a ac 01 2c 47 a5 6d 7b ae ed 06 ba 42 6b 98 2a e4 0a 33 f7 4c 8b 35 e2 d2 76 98 01 aa df e3 4e 1f 4d e7 af ed 80 e5 ec 66 62 e8 16 ca 1b ba 20 24 1b 28 2d 85 e9 96 03 3e bb 81 96 ee d7 c2 90 aa ee d9 45 75 e8 4d 8e 06 10 64 Data Ascii: wa;_1}CN+LlF&%n0Fc m?=ihaM4lij&QZIudRCmq0Xm/{Kf"i733&5[m:7kAn[[jv+F-r>qVJ8=Sz,Gm{Bk3L5vNMfb $(->EuMd
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: 94 51 14 f5 2a 91 1a af a4 d7 e0 69 5a 99 17 34 91 c6 72 21 d2 fa ff b0 11 25 bc c8 5a d2 04 a2 65 fd 80 72 a6 1d 1d 41 e7 3e 3e b9 ba 7a 0e 1d 5c ef 18 bd be 3b 73 68 29 a2 8f 68 c3 c2 61 4a ab eb 39 50 88 71 39 37 89 ef 9d 95 4b 24 0d 2f c4 79 0e 89 02 f5 b8 ef c4 bd bd b6 2a 5f dd d7 72 91 f1 05 ea 4e 38 d0 e3 e0 41 4e 9f d4 98 7e bc ba 68 39 35 70 c5 68 60 68 9c 3d ba 35 90 85 51 db 18 c2 53 66 95 1e a7 84 08 34 f3 9f 90 ff 6e 0e ec 51 b9 23 29 d3 1a 71 73 a9 09 cf 02 75 14 6c 03 0f d7 5e 17 09 35 6e a7 51 c6 bf 2d d5 15 d0 e1 9a 7a 2c a2 cc 5c 59 97 95 d6 de 59 04 ed ae b6 3b 9a 33 48 ba 5f 77 09 67 9f f2 c8 0d e5 51 f6 53 1e 2a 34 74 85 80 89 39 50 1d 3e b3 8d a8 9f 4f 56 cb 92 a0 9e aa ed a4 04 8a 83 61 b3 95 34 b9 1e d4 a6 07 79 93 b4 ce bc e8 84 Data Ascii: QiZ4r!%ZerA>>z\;sh)haJ9Pq97K$/y_rN8AN~h95ph`h=5QSf4nQ#)qsul^5nQ-z,\YY;3H_wgQS*4t9P>OVa4y
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: bd bb df ff 93 46 72 70 b0 46 f5 a8 fd 02 79 86 09 57 d0 1a a6 18 4b 1c d7 27 f1 94 52 a0 e5 53 cc 7d 96 62 db 98 9f 88 de 18 17 07 10 53 8a 33 c4 9f b8 82 a7 09 be da ec 7c 47 26 48 96 6e 16 81 74 43 9e 6b 9c af 0f 37 a2 f0 9c d7 69 a3 60 23 74 9f b2 22 81 f5 6b 1c e1 80 71 c8 f2 37 91 6e b3 97 4d 43 4a 7b 4b bc d4 bb fa 0a 44 7b af b8 b9 c8 f8 b7 a2 79 14 fd 10 ef b8 bd fc c8 6f d1 9f df f0 ad 71 c4 43 04 80 9d fc db d7 3f 3c 79 f8 dd b3 17 df ec 3d fa f6 e1 8b 6f 9e 24 7b 03 bf a1 01 3a 21 cf f3 55 9d 23 93 37 3f da 7b 05 3c 5a 93 ef 61 66 13 3c 62 ae 18 cc 34 70 6f 47 7b 4f 91 ef a3 65 b5 9b 7e 6f f0 d9 95 1d da 66 40 7c 9d c8 7f e9 0d d6 ff bc 9c b3 23 f7 39 93 a5 d5 34 80 72 17 11 3c d9 25 15 2c c9 26 36 39 a7 35 39 f1 ab 69 e1 b2 53 cd 11 26 f1 45 Data Ascii: FrpFyWK'RS}bS3\|G&HntCk7i`#t"kq7nMCJ{KD{yoqC?<y=o${:!U#7?{<Zaf<b4poG{Oe~of@\|#94r<%,&6959iS&E
2024-10-03 19:41:17 UTC	16384	IN	Data Raw: 84 bd 6b 88 de 23 38 ae 7c 5a 58 4b 00 e7 d7 21 8c bf d6 38 77 0e 40 e8 a4 e2 98 43 cb 66 56 51 1f 29 e3 a9 ca 62 fc 2b 0f 40 e5 31 5b 45 12 16 6f 6d 71 fe 4b 0c fd 9d 83 b3 38 1e 14 af b2 f9 de eb e2 62 bd 44 4a 3a 50 f0 00 a1 11 83 47 55 58 26 9b db a2 ba c0 e0 44 78 77 76 a1 14 af af dd 43 60 29 eb 87 67 9c 6a c2 98 6e 9f 67 33 b4 9d 0e 60 64 d5 1a 2e 2f 98 35 e0 2c 6d 22 48 9e b3 97 79 2a 75 d3 39 1f 83 17 5e 06 70 b4 35 5b c4 3e 9d 08 3e 1d 8b 60 48 cc 2e 7e 8f 08 97 4b e8 ca 7f ff 29 5b ae e1 c7 9d bf 46 c0 0d 36 3f 37 d7 3f 97 f1 67 1a 1d 52 94 40 d3 3d 9b d8 39 0f 69 1d 27 e3 a0 bd 97 e8 5c ed b6 b5 bb 80 de 7a f6 88 5f ee 9f 56 f3 cb 07 78 80 ee df a1 3f 7f 81 7d 4c a0 57 da 94 ff f8 e5 f3 57 e8 f6 5f c7 ec fe cf b9 e2 f1 ec 12 6c 8c 33 93 1f 61 Data Ascii: k#8\|ZXK!8w@CfVQ)b+@1[EomqK8bDJ:PGUX&DxwvC`)gjng3`d./5,m"Hy*u9^p5[>>`H.~K)[F6?7?gR@=9i'\z_Vx?}LWW_l3a
2024-10-03 19:41:17 UTC	1024	IN	Data Raw: 87 ef a0 d6 6a a9 16 18 7b af ce d5 85 3a 53 ef 27 55 27 0b 1a d2 4f b4 31 5d 5f af e8 bf e7 f4 df 0b fa ef 12 0d d1 86 8a 4f 74 eb b0 90 19 83 26 a0 9e 82 48 00 32 9f 04 55 68 5c 6d ef 67 e4 6e 6b 52 af e2 b7 d0 cb b6 d4 c4 63 cf c4 58 a1 59 09 a6 04 d3 5d c6 b7 24 00 4d 4c 4c 26 70 d1 d0 1c 9c 05 6a bb e1 b6 ed b1 80 ce f4 04 37 9c c1 df d3 3c 21 3d a7 0b 54 fb 79 f8 f6 e7 e6 e4 30 3a 8a a7 77 ce 84 37 bf a7 9b 99 22 96 f3 8f c0 7f d7 8f b2 06 44 6d cc fd 06 57 f7 51 b3 3e 85 d5 8d d0 55 14 0a 7c 5f 7d 30 05 40 30 d6 ef c6 b0 50 4d da 81 96 4e 33 01 bb db 06 0d 89 2f 1d b6 b2 a1 59 da db 3f ff 21 07 b5 21 c0 00 05 f3 1d d9 34 5d c0 37 bc 1d a0 b7 f4 11 c1 33 5e 5f df 89 a6 e9 f1 c3 e1 7f 9d c4 77 5c ee 6c 7a 17 d5 b1 46 05 8c 37 d4 aa 3f bc 0d 08 3f 9d Data Ascii: j{:S'U'O1]_Ot&H2Uh\mgnkRcXY]$MLL&pj7<!=Ty0:w7"DmWQ>U\|_}0@0PMN3/Y?!!4]73^_w\lzF7??
2024-10-03 19:41:17 UTC	16384	IN	Data Raw: 0d 08 ec 1a f6 35 f3 d8 50 8e 32 e5 6e 98 00 9f 1f 1c 9c c3 7b fb 9d d3 6a 7e 79 70 30 a7 46 f7 e7 d1 b6 ef eb bc 11 54 1f 0a 13 b3 6d 3f b0 31 43 bb 80 2b 02 88 f4 3a 5b 22 e9 c1 bb 6f 1a 3e 38 e2 34 a5 94 83 98 48 06 f0 3f 37 57 d2 29 5d 39 73 31 fd 0d 7c 91 c9 8d 4d 93 f8 67 10 53 b2 b3 fc cf 0c 10 ae 2e fd b7 7f e1 b7 7f d1 6f 4f 39 b7 51 2f 3a db 87 f4 54 7f 4e 7d 84 3f a9 bb ea 35 fc d5 56 2b f5 0e fe ad e9 dd 4b f8 eb b4 6a db ea 42 bd 85 3f 97 f9 a2 55 4f 30 d7 4f 56 13 c2 4e 81 91 0c 39 2c 0b 03 ee 14 d3 d7 c9 00 41 96 e8 ef 97 c9 eb c3 0f 77 ee aa 47 e9 60 86 39 7a eb 01 c1 b9 bd 3d fc 78 e7 ae 2d 56 4d df 25 6f d5 1b 5c f7 87 70 b2 1e de 5f 18 82 f4 d0 00 54 bc 4a 17 c7 0f 4f d4 f3 f4 d5 d6 e1 3c 4e 9f 9b e1 bc 80 3f 79 38 bf c2 5f 38 9c 1f e0 Data Ascii: 5P2n{j~yp0FTm?1C+:["o>84H?7W)]9s1\|MgS.oO9Q/:TN}?5V+KjB?UO0OVN9,AwG`9z=x-VM%o\p_TJO<N?y8_8

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:16 UTC	538	OUT	GET /vendors~multipage-10.68d4f9c1c2978cd78694.js HTTP/1.1 Host: gain-app-prod.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:16 UTC	458	IN	HTTP/1.1 200 OK x-amz-id-2: 6KSWqNiuVAEJF2TkmTh3F/QXgh6HKAH/dQgaMy6iOeyzu5xJCw0LNLzQPa/e4VmNN7a/rduI0SmgFt32ipX96A== x-amz-request-id: 12Q5FEHD6QBZYMDY Date: Thu, 03 Oct 2024 19:41:17 GMT Last-Modified: Wed, 02 Oct 2024 23:16:17 GMT ETag: "82d1c64072d8c05e04d68393a4d88209" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Accept-Ranges: bytes Content-Type: text/javascript Server: AmazonS3 Content-Length: 140648 Connection: close
2024-10-03 19:41:16 UTC	1499	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 b4 7d 7b 7f da 48 96 e8 ff f7 53 80 d6 4b 4b a1 8c c1 79 0b 2b 8c e3 38 d3 99 c9 6b e2 a4 7b 66 31 ed 91 a1 30 8a b1 44 4b c2 8e db b0 9f fd 9e 47 55 a9 24 84 93 de bd 77 7e 3d b1 28 95 ea 79 ea d4 79 9f bd 07 cd c6 eb 24 6d cc a3 b1 8c 33 d9 88 e2 69 92 5e 85 79 94 c4 8d c5 5c 86 50 94 49 d9 b8 96 f1 24 49 b3 ff be 5a ce f3 68 11 5e c8 dd 5e b7 f3 e4 d9 e4 d1 f4 f9 b8 37 de 7f fe f4 d9 78 f2 f4 d9 93 e7 8f 3a 5f b3 ce db 37 47 c7 ef 4f 8e 1b 0f f6 fe 8f 7b 13 c1 87 37 9d 1b 79 be 08 c7 97 7f cb 92 78 11 d4 94 ad 56 c3 91 d7 59 2c b3 99 3b 1c f6 ba 23 71 d7 eb f5 1e f9 d3 65 3c c6 a1 b8 52 e4 22 f6 ee ae c3 b4 91 06 b1 bb ff bc e7 89 08 1e 1e f6 9e 78 22 81 87 de d3 6e cf 73 9b 50 1c c2 af e7 0f 9f 7a ae f3 e6 f8 ec e3 a7 0f Data Ascii: }{HSKKy+8k{f10DKGU$w~=(yy$m3i^y\PI$IZh^^7x:_7GO{7yxVY,;#qe<R"x"nsPz
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: 73 3e 97 cf 1f 3e af a7 84 45 66 af e1 1a 0e 6a 0d 02 32 b4 41 34 4d 61 f9 e1 ab 34 48 14 16 21 ca 37 ef 64 f9 ed 5c 76 26 11 50 93 e1 6d e0 c4 80 51 1c 41 07 bc eb 21 35 03 fc c2 d1 2c 9a 4f 00 cd 0b a8 9d 8e 03 e7 6b 78 1d 66 e3 34 5a e4 3e a0 48 09 a8 6c 9c c4 39 2c e9 af cc 0f 68 8a c1 eb 00 89 02 c3 11 b2 73 93 02 38 bb ce 01 7f f6 42 d7 e8 bc 56 40 77 70 ba a7 5e e1 e6 74 c6 f3 24 93 2e 62 1f d9 79 dd 4f 77 77 fb de 44 ce 65 2e 1b cb 02 3c 87 c9 30 1d 8d f4 1e 2c 5d 6f bd 41 6a 2b ba 63 b5 aa 61 16 0c 2e 5e ce e7 4d bc 9a dc ac 68 9b 68 6c c0 db 78 3a 32 61 bf c0 ea 22 1e 86 a3 00 a8 98 38 80 6e 2d 12 76 10 fb 11 a2 28 26 c4 f7 ef a1 8e 7b 88 5c 23 b5 c1 b8 7e e3 10 68 79 de 19 47 38 a6 3f b8 1b f3 ce 54 4f 07 e8 ba 0f 37 b1 26 fd de c3 96 66 f6 dc Data Ascii: s>>Efj2A4Ma4H!7d\v&PmQA!5,Okxf4Z>Hl9,hs8BV@wp^t$.byOwwDe.<0,]oAj+ca.^Mhhlx:2a"8n-v(&{\#~hyG8?TO7&f
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: e2 49 25 cd 76 e2 64 32 49 97 a6 57 78 a5 14 86 32 95 1e 00 6d ab 44 a7 e5 72 6b b8 93 12 e4 c2 15 89 99 88 76 60 cd 73 ca 19 63 05 11 87 95 b6 7f 59 9a 48 73 16 9f 07 16 cd cb b2 a7 8d c4 eb 85 50 26 60 db 5d 1f 8f 94 ec 17 a2 13 76 ac 49 6d c7 9a 88 8d 80 e0 6c 07 4b 16 08 4b f6 15 b2 74 0f b2 44 95 ad 56 bd 5e 50 1e 8e ec cc 92 cc 9e fb 45 ae 25 36 74 87 36 c9 3b b8 20 2d fb 9e e6 5b 15 09 67 93 9d 96 26 51 9f be d5 2a ca 5d 13 a0 bc 8e 44 b4 da 62 2e ef 2a 47 76 db 90 6d c1 1d e9 1c fc cd 28 05 b6 2c 31 75 bd bb 98 ac b7 9b 5d 81 7a f2 b5 83 74 1c e2 6a a7 a4 eb e8 50 6b 14 4e 63 90 77 2c 77 ff d4 f3 89 90 a1 18 a5 af 3e bc 53 64 b2 0e cc 8c 02 76 4c 8d 43 af 51 bc 8b 45 18 3a 48 c9 53 36 53 98 d9 1a 54 a2 90 2a 88 86 98 13 07 90 17 9d 24 d4 6b 49 a5 Data Ascii: I%vd2IWx2mDrkv`scYHsP&`]vImlKKtDV^PE%6t6; -[g&Q]Db.Gvm(,1u]ztjPkNcw,w>SdvLCQE:HS6ST*$kI
2024-10-03 19:41:16 UTC	15360	IN	Data Raw: f2 55 64 8d b8 fa 4c 70 18 9b 0d e5 36 82 e6 e1 38 26 a2 93 ba c4 99 94 52 bd 16 0e 2e 54 7d ad fe c2 d8 05 5a 2a 6e 19 b9 f9 c8 88 40 fb 9a e2 15 56 21 b6 42 c6 91 fe 45 5e 83 bd 0a 3a 15 37 ac 2e 5c 32 d9 34 15 c4 99 72 c2 08 2e 80 bd fb e8 ee 17 79 6b e1 a6 82 e2 71 ce 7f 27 39 1a 96 7a 4a 55 86 0b 5d d8 20 25 da fe 1f 2d 2d 97 b9 27 89 bc 24 3f 00 cb 67 8d 35 8c d6 cb 48 e4 25 cd 21 14 af 35 de 46 50 06 88 12 59 f0 d1 0d bd 81 8e c3 e6 26 a2 e7 f9 98 1e bc db 5f 1e 64 85 07 fe 38 50 ed 2e 47 04 c4 fd 10 20 3d 6c 8f fd b1 91 35 af ab 03 b6 86 89 5f d8 c3 50 e8 bf 7c 53 25 b1 bf a9 38 aa 11 ad c5 15 c9 5a fc 03 82 b5 24 6d fc 9b f3 0d 40 67 ff 2e a2 5f 66 ec b1 60 09 4f 22 25 21 e9 92 d8 cd 92 b9 69 81 5b 08 98 ab f8 59 67 4c 16 d8 79 10 90 c6 a3 dc 04 Data Ascii: UdLp68&R.T}Z*n@V!BE^:7.\24r.ykq'9zJU] %--'$?g5H%!5FPY&_d8P.G =l5_P\|S%8Z$m@g._f`O"%!i[YgLy
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: e3 fb 80 a6 26 95 a7 bb bb 2d 89 cc ad de bc 6f 9f bd 95 78 f3 72 06 76 76 bc 3f 1f bf 7a f9 da 4d e3 18 89 08 9d c0 65 e8 b4 c9 03 b0 42 9d a4 1e a2 19 c1 57 28 72 13 8a 9c f1 21 39 0f 82 f1 b7 7e 11 8c 0b e9 d6 76 b8 1d 44 bf 20 e1 86 fd 53 84 40 9a 71 2e d9 1b 45 08 dd e6 20 a2 4f 21 e1 5c 21 81 1c ef d5 5f bc 20 82 13 45 aa 0b be 92 8c cd d0 ad 1c ad 9f 4a 99 ae 60 bc f2 83 93 7c af 89 3a e0 00 34 53 26 8a 1b 35 ba 04 d3 4d 15 b0 f8 84 2e 60 53 26 31 9d 82 ca d7 93 c1 86 2d 7e cb 2b 15 f4 88 a9 3a 46 1a c7 ba b3 27 f8 76 cc 07 a1 98 60 0c 2a 1e d2 79 e0 a0 f8 09 e2 aa f9 e2 7e ae 08 d6 f5 78 a1 3c 14 8b 9b c8 04 01 e1 fc 80 ed c8 97 44 4c 8b 65 ae f0 3a 80 71 87 4b 9c 2e 15 16 b1 b3 cd 29 45 9f 6c 76 4a 74 41 a3 60 ad 09 e5 25 ba 0a 38 69 b5 5c 14 c9 Data Ascii: &-oxrvv?zMeBW(r!9~vD S@q.E O!\!_ EJ`\|:4S&5M.`S&1-~+:F'v`*y~x<DLe:qK.)ElvJtA`%8i\
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: ef 1c 67 69 ed 4c 7b 32 ad 9c 77 e4 0c 47 f5 d3 0b 1f bc d0 04 f7 45 72 33 28 f2 c5 0d 14 9e 64 b2 42 3d aa 65 52 c3 3e b2 1a 14 a5 aa 7d 20 0a f6 d5 83 60 ad 7d 6a d4 f6 a4 3d 37 52 e6 63 5a e0 a3 57 2f df 3e fb db db e3 f8 b5 44 33 23 f0 28 f5 4f 24 a2 a9 f2 3c 62 36 c0 bd 67 a6 57 10 fa 42 34 e4 f5 f9 71 ea 7a 42 d3 f9 71 d3 c1 e9 a9 ab 8e 79 ab 71 e0 c5 86 60 35 cb 31 de a2 21 3c d5 f8 40 53 83 48 cf b1 1c 11 5a c5 c7 34 79 17 cb 5a 39 00 5f d1 a5 98 e4 03 f9 aa 74 c9 60 6d 39 e0 77 65 8a b7 e7 b9 b6 69 59 c3 71 ab d9 c7 e3 9f 30 ec 68 6b 0b ee ca d2 29 d1 6f 7c 54 5b 3a 54 ca f3 7d 5b c9 69 7b 7b 95 5f 95 c9 f2 6d b9 22 a0 3c 63 57 14 3d c0 22 b5 d2 ee 94 a9 4a 2b 8e c3 56 d3 6a 1c 4d f3 b4 78 83 bb ba be 36 39 7c b5 53 85 66 87 fd b6 3a 1c 2e 1a 55 Data Ascii: giL{2wGEr3(dB=eR>} `}j=7RcZW/>D3#(O$<b6gWB4qzBqyq`51!<@SHZ4yZ9_t`m9weiYq0hk)o\|T[:T}[i{{_m"<cW="J+VjMx69\|Sf:.U
2024-10-03 19:41:17 UTC	16384	IN	Data Raw: 67 4d 21 05 cb 46 7f 10 11 cb c5 9d 85 f9 99 d3 4e bc 71 d3 d4 8f 95 81 ad cc 4f 55 9e 15 b2 ce c7 5f 09 2b af 70 f6 27 ab 58 2a c0 64 68 4d ed 35 fa fe 09 4b 48 3d f9 1a 4d 21 19 2d f7 61 0d b3 12 c0 22 d2 22 9b b3 0a 44 5e 41 22 52 bd eb 66 c4 ed c6 73 76 f5 ee 52 7d 44 44 de 5b 97 cc ac 9c c0 fa 81 c6 f9 da 75 77 c3 64 9a c1 7d c6 fd 38 6d 7b bb 92 b4 4b 5d c6 d4 bc 89 2f 81 23 ba 5a 3d ac bd 2e 6d 70 d9 de 25 98 66 8f 65 35 a3 fe 18 c0 51 bb df a7 77 51 b4 1b 4b d8 f9 a7 5e 13 b3 a0 18 f5 c6 48 16 17 c4 ec ba 47 e9 1f 2b 69 76 b9 9a e7 9e 3b 0c 46 80 b3 f7 76 c5 22 98 31 c2 ed ce 8e fc ed e6 c5 fd 2c 12 ac ac 67 c5 2a 6d 3a 8b d2 f0 fc 92 c5 16 2c e2 43 9c 1e 74 e0 d2 03 cc 2d ed e6 30 79 f1 e8 3f da e7 3f 2c e8 94 dd 0f 73 da 40 db 89 72 08 77 75 8c Data Ascii: gM!FNqOU_+p'XdhM5KH=M!-a""D^A"RfsvR}DD[uwd}8m{K]/#Z=.mp%fe5QwQK^HG+iv;Fv"1,gm:,Ct-0y??,s@rwu
2024-10-03 19:41:17 UTC	1024	IN	Data Raw: 68 01 c0 3a 44 6f 7a 71 d1 6d bd be 68 69 d2 8e 66 2e 75 4c bd 12 25 f9 32 53 22 d3 7b 2a 5f 2b ac 51 ea 94 e5 50 51 32 89 21 46 cd 39 4d 46 d9 6a 85 d9 a5 14 8b 01 b7 7f 60 fc 3e 14 82 d0 08 7e 52 13 7b 26 09 27 4e 6e d2 6b 8c 34 18 23 07 1e a6 cb e0 e1 4c a6 fe 73 19 2d 23 3f 12 67 54 f6 45 7c f9 fd 2c c5 64 cf c4 59 b6 4c d4 4d ac 4f b0 9c 16 07 fa 49 53 7c 91 a5 37 31 44 81 33 f8 c7 ca 1b 54 a0 92 e9 eb 5c 84 a8 fd be 96 41 a5 d2 73 1c 6c f1 24 aa 3d 57 a9 f0 93 62 99 e3 a4 f2 54 d2 e8 40 2a 95 b1 78 6a 8f 75 32 5d 2e 13 0e 8c 46 79 a7 34 6a 19 ce c0 5a 4d 26 1d 26 71 ac d6 c3 9e 80 3c 4a c9 77 ac fb 22 1c fd f9 d0 2d 8e ce c3 f9 e4 65 73 36 eb 44 41 d6 f2 b6 39 bb 11 a0 ab dc cc e7 58 59 cd 73 2e 7a be 40 60 c8 e2 91 bc e6 b9 6c 06 7d 54 3f 17 f4 35 Data Ascii: h:Dozqmhif.uL%2S"{_+QPQ2!F9MFj`>~R{&'Nnk4#Ls-#?gTE\|,dYLMOIS\|71D3T\Asl$=WbT@xju2].Fy4jZM&&q<Jw"-es6DA9XYs.z@`l}T?5
2024-10-03 19:41:17 UTC	16384	IN	Data Raw: a6 2e 4e 69 04 e4 d5 cf d1 34 d1 d7 a7 57 cb 4c 5d be cc 62 79 71 12 d2 71 81 cb b1 38 7c bf f7 76 ef e8 10 35 7c 1f 5d 80 e1 dc bf 02 52 1e e5 da 4b 92 b4 75 90 d2 ca 8e 65 46 ce b4 8f 27 07 94 f0 f2 f5 fb 93 53 6a cb bb 97 3f 1f 1e fe c3 ff 46 1c bd 7b 7b fa 8a b2 fc 18 26 cb 30 e3 0a a3 f3 4c 5d 1e 85 19 0c 0e 9c bd 45 86 d0 ea 74 8f d4 1f 97 18 11 fa 99 e1 6e 6f 79 b9 e4 9a 4f 68 09 44 e0 4c e8 fa 1d cd 37 79 f5 36 bd d1 89 07 d1 44 5e 8e c5 c9 ab 77 ef 4f cd 90 c8 f1 90 83 21 07 42 0e 81 ec bd ec ba 7e c9 6a af 6c ab 6c a6 6c a4 dd 44 d9 42 d9 40 d9 3a d9 2e d9 26 d9 1c 14 7a ba f7 f6 60 ef cd bb b7 87 ff 67 46 02 9f e1 f0 ed 01 7d d0 1f 0e fd d1 d7 e2 9b 31 cd c1 d9 8c f9 36 e7 90 fe 89 d6 11 fd 6b 4d 45 8b ea 98 a5 c9 a5 7c 64 25 ce a3 69 bc 9c 73 Data Ascii: .Ni4WL]byqq8\|v5\|]RKueF'Sj?F{{&0L]EtnoyOhDL7y6D^wO!B~jlllDB@:.&z`gF}16kME\|d%is
2024-10-03 19:41:17 UTC	1024	IN	Data Raw: 1c 6a 67 65 a8 32 c3 33 f0 9d d9 f8 b6 f4 16 d0 b3 86 35 4c 5f 64 55 6f 98 5a 3a 7e 1c 2e 94 ec d4 e4 e4 f8 14 43 55 f2 33 47 bb 91 60 09 a6 c4 95 34 2e ae a4 31 8d a1 02 b8 69 66 30 8e 0e 2e 08 22 8f 4e 60 fb a8 f0 91 f0 7f 2e a9 b0 31 15 d5 5e 3b d8 8e a0 04 da 5a eb d7 5d 20 ae 00 34 e7 29 02 92 4e 78 0f dc fa e7 c2 66 d8 58 66 7b ae 3c 6e 51 de fb 3c eb 3d 61 bb b1 ad 04 bb bc 98 a6 a0 e7 60 c8 9f b8 cf 10 04 86 e1 9d 84 56 56 88 88 36 43 2d 0a 1d 6d 88 9b 27 5a 05 cd 1f a9 a1 72 ac 69 95 5a 78 75 04 70 ff 25 f0 92 b1 5c 9f 4e 4f 6b 23 82 aa 95 41 17 d2 d0 22 9d 93 b9 54 55 6f 68 36 36 9b e7 e3 47 ac 81 56 0f a8 0a 55 39 77 e6 d2 e3 4f 9c bf 78 9e 08 e8 24 80 96 9a 4c 85 aa 52 a8 43 c9 e8 09 79 aa 88 13 c2 4d a6 c1 25 e1 95 8d 08 8b 33 43 2c 0e 2f 5d Data Ascii: jge235L_dUoZ:~.CU3G`4.1if0."N`.1^;Z] 4)NxfXf{<nQ<=a`VV6C-m'ZriZxup%\NOk#A"TUoh66GVU9wOx$LRCyM%3C,/]

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:16 UTC	527	OUT	GET /multipage.68d4f9c1c2978cd78694.js HTTP/1.1 Host: gain-app-prod.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:16 UTC	458	IN	HTTP/1.1 200 OK x-amz-id-2: pD916Qw36eHY3z6KeY2cIomiWu9TdCtKtE7nV1Wtw4wFGhkd1Tn9t8eBYSttTSiA3Cuvq4GS4gXIG8axwDAbow== x-amz-request-id: 12Q2NKDBCZYST936 Date: Thu, 03 Oct 2024 19:41:17 GMT Last-Modified: Wed, 02 Oct 2024 23:16:16 GMT ETag: "54c72e993c44ee898ff5733844804d58" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Accept-Ranges: bytes Content-Type: text/javascript Server: AmazonS3 Content-Length: 370160 Connection: close
2024-10-03 19:41:16 UTC	15834	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ec bd eb 7a db 46 d2 30 78 2b 34 9e 8c 5e e0 4d 8b 21 65 cb 76 c0 60 34 b6 65 c7 8e 0f 72 2c 1f 92 68 f4 f9 01 c1 26 09 1b 04 68 00 94 44 53 dc cb d8 6b d9 5f 7b 31 7b 25 5b 55 7d 40 e3 40 89 76 22 69 a2 f1 8c 23 92 8d 46 1f ab ab eb 5c 37 86 b3 38 c8 c3 24 b6 b9 b3 50 df 5b b9 9d c3 af 24 b5 8f fc b4 95 32 9f 05 5e 7e d0 39 64 33 f8 e8 1e b2 08 3e b6 0e d9 d0 eb b0 a9 77 70 d8 1b fe 14 b4 23 1e 8f f2 71 6f f8 fd f7 8e ef 05 07 c3 43 b6 d7 ff c0 83 bc 3d 4d 93 3c c9 e7 53 de 1e fb d9 de 71 fc 32 4d a6 3c cd e7 ed c0 8f 22 3b 61 be b3 b1 91 1c f8 87 1b 1b d3 f6 74 96 8d 6d fc 01 9d 39 0c bf 78 9d 1e 8e 23 6d 85 71 6b e6 ac d5 e4 8c a5 d0 a4 cd 0f d2 43 6f 06 7f 1c 6a 21 db d8 c8 60 56 bd a9 1a a9 33 6d 67 e3 70 98 db 8e ed f4 Data Ascii: zF0x+4^M!ev`4er,h&hDSk_{1{%[U}@@v"i#F\78$P[$2^~9d3>wp#qoC=M<Sq2M<";atm9x#mqkCoj!`V3mgp
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: bb 34 66 40 4e 38 a2 a6 fb 7a 9d 04 58 66 ce 37 96 9b 49 b1 62 2f d7 f1 d0 52 84 35 a5 07 4b e0 47 a1 ec 0a 8b 48 24 c9 0e c6 5e b5 dc 84 f9 50 45 21 df a0 a8 e0 ef 58 48 c6 5b ae 8f e9 af da 95 e4 53 3a 92 1a 90 0e d1 c6 06 c6 4e cb ab 96 50 53 cf c8 13 3d f0 8c b4 cf fd a2 9b c1 8e b5 75 f7 2e 3a 4c 0d d8 d8 cb 29 24 ba c4 77 6c 54 54 1b 9f 9e 8e d9 04 db 50 2a 21 36 2f 9e 4e 76 16 4b 77 82 5c f1 8d 91 0a 2c 22 e2 2b ee 79 8b 24 36 e2 6a 1b c9 9f 8a 52 26 ab 10 74 d4 aa 50 e9 92 1d 79 0b c5 77 3c 0a 4f f8 00 d9 20 71 c7 3e 8c 85 99 d3 8d ae a1 b0 02 8c ff 94 b4 30 73 61 f9 34 0e 07 dc 5d 70 5d 75 29 5e 56 59 d7 b2 f2 33 a4 de 80 af d9 27 cb 85 c5 68 3a bb 17 04 3c e2 d2 04 12 6b d4 92 81 a9 d7 b3 25 1b 46 e1 b4 d4 1e ea 72 9a 62 2d c0 96 ad 0a a6 be 9b Data Ascii: 4f@N8zXf7Ib/R5KGH$^PE!XH[S:NPS=u.:L)$wlTTP*!6/NvKw\,"+y$6jR&tPyw<O q>0sa4]p]u)^VY3'h:<k%Frb-
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: 15 4a cc cc 82 c5 b6 52 76 11 2f 6b c2 ae 61 29 c2 22 e5 9e d1 92 91 b4 92 1a 51 77 7b cb 0e 2f a0 ce 95 ba 3d 80 1e df 24 72 f0 08 ce 8a f3 be 58 2b 61 24 2d f2 de d8 c9 cc b7 e7 e6 e7 9b 53 28 89 1e c1 62 7b 85 24 e4 4e ed 4c 04 8f a6 a2 57 ce c2 a8 d3 49 61 6e 0d 1d 55 d0 1a 9a e6 57 c8 95 9e a2 fa 02 d9 0d 88 84 67 ab fa 8c 17 c8 60 46 ae 45 a1 b6 aa 2b 3b 28 65 0c 43 14 16 f3 1c ee 4d 60 d2 a1 f1 49 04 6b c8 19 d7 7c 9f e5 22 5a f3 49 96 fb e8 c7 1f 8d 2a 16 3c 10 1a 0e 80 6b 2b 68 ca 06 b9 e5 a9 aa c8 32 ab 26 55 0c bd a7 8a 71 9e 36 d7 41 ce 59 b5 b2 fa 2c c2 75 de 11 74 61 fb bf 87 2e dc 92 74 a1 9d a5 0b 01 ef b0 75 01 42 12 4c 3d 3f 1f 7f 21 bb 52 5c b8 25 56 8c 85 6f 11 9e e2 94 90 51 71 6c 77 e5 31 37 09 d6 62 0c 3e 17 27 e2 13 c8 8e b7 a8 d0 Data Ascii: JRv/ka)"Qw{/=$rX+a$-S(b{$NLWIanUWg`FE+;(eCM`Ik\|"ZI*<k+h2&Uq6AY,uta.tuBL=?!R\%VoQqlw17b>'
2024-10-03 19:41:16 UTC	16384	IN	Data Raw: cf df 47 8d a2 5f 5c 7d fe 1c c0 67 f1 c5 cf 90 f2 1b 37 a3 78 af 9b 51 fc a1 4b c6 fe f8 6e d5 45 9c c1 f7 1d cc 68 70 3f c1 8c 06 4b 05 33 1a 3c 70 30 a3 c1 37 0a 66 34 f8 56 c1 8c 06 7f 0b 75 91 60 90 52 17 09 06 7f a9 ba 88 3d f8 47 5d e4 6e 75 91 c9 20 ab 2e 32 19 dc a7 ba 48 6f 60 50 17 e9 0d 16 a8 8b fc f1 37 50 17 a1 59 94 fb 78 32 78 60 f7 08 de 60 a1 1a c6 33 b7 f6 74 f2 29 e7 1e 41 da fb e3 73 5e e8 fd b9 cc 23 0d d6 84 78 9c 9c 6f 73 d5 62 91 c0 3d 09 a4 94 32 ea 3c a6 a4 94 77 23 26 27 9f e7 c9 f0 ed 1e 36 b7 8e ec e1 6e 17 f0 21 8b 38 c5 5d ae 25 51 be 72 ba 17 6e 5c 8e ed 71 59 85 27 14 22 6d cd e8 0b 25 d5 d1 60 91 12 08 9f 82 94 26 ca f0 63 75 72 fd 7c 8e 26 ca 57 4f 53 ca 6b 64 56 dd c4 a0 48 70 e5 7a 5e b9 27 5c 8e 4b a1 3e 0e 7e 30 58 Data Ascii: G_\}g7xQKnEhp?K3<p07f4Vu`R=G]nu .2Ho`P7PYx2x``3t)As^#xosb=2<w#&'6n!8]%Qrn\qY'"m%`&cur\|&WOSkdVHpz^'\K>~0X
2024-10-03 19:41:16 UTC	1024	IN	Data Raw: 85 29 49 d4 47 3f 7d 0c e1 30 d0 18 39 e7 e8 8c 15 a3 db db 01 ac 41 d1 be bd 9d dc de ba b7 b7 de ed 6d af 44 5e 41 31 f6 8a 9c 0d f4 34 90 82 0d 50 04 f2 7b a5 74 85 4c cd 9e cc cf a5 96 77 e5 ca 0b fe 64 09 95 51 73 27 7c ed 24 fe dc ba e8 d7 4f f8 90 2b a1 9b c6 62 8d 49 0f ea 6b b0 37 8b 98 01 be b8 d1 11 dc c6 2a 2b b3 fa 36 60 e8 b7 b7 45 5e 85 f4 c6 59 5b 2d 95 12 f7 99 74 22 36 1d d6 72 d8 85 c3 9a 0e 3b 76 d8 8e c3 3a 0e 6b 3b 6c db 61 1b 0e db 73 d8 be c3 3e 3b 6c d7 61 27 0e 7b ed b0 77 0e 7b e5 b0 b7 0e fb e4 b0 1f 1c f6 c1 61 6f 1c f6 bb c3 de 3b ec 37 87 fd e1 30 27 66 31 9c a9 98 85 31 0b e0 20 c6 cc 8e 59 2f 66 93 98 79 31 8b 62 36 88 4d 30 70 1f 8e 73 05 a9 1f b8 31 e3 fc 21 6d e0 77 d5 f3 f5 98 b2 a2 0f d8 7e dc b8 71 23 a9 04 51 1f c1 Data Ascii: )IG?}09AmD^A14P{tLwdQs'\|$O+bIk7*+6`E^Y[-t"6r;v:k;las>;la'{w{ao;70'f11 Y/fy1b6M0ps1!mw~q#Q
2024-10-03 19:41:17 UTC	16384	IN	Data Raw: 07 fa 45 6a 55 fa 0a c6 32 9c 86 cf 94 d0 62 e7 3c ca 76 9b 93 c9 ce 69 66 72 ce 6e 6f e5 17 eb 3f ff 91 a9 d6 99 6c 8c 77 02 4d 85 0d 8d ca 10 17 72 23 52 80 1d 0e a4 92 79 73 f4 7e 33 15 44 50 f0 15 92 d0 3a 32 b6 26 0f 6c 01 24 51 e4 b9 3d a7 f8 82 62 2a 58 07 ea 96 f0 33 4b c0 39 2c 7a 0a 21 71 04 a8 ad 3d 7b 4c 65 6e 6f ad 23 87 17 37 8e 8c 32 37 65 40 1c 51 e4 f1 ff 29 ae d7 4f dc db 9d 12 40 f5 f5 fa 8b db da f3 db 27 ab 25 78 dc f4 ec d1 d8 e9 97 d6 a9 92 1f 1e 57 90 a7 06 b7 57 66 a8 99 f9 2a dd 18 43 7f ec f8 97 18 32 a0 60 03 51 34 1a 93 0d 44 34 46 46 62 c1 0f fc 32 2d 09 9c 40 15 44 a4 f2 3f fe 8e 5f 20 ff d6 98 b5 0b 5f 44 16 46 05 6c ec 52 81 df aa 11 8f a4 72 6e 5f 3a 05 bb 90 5b fb 62 09 90 f7 f8 3c e8 57 30 ba 88 b6 2d 45 ff 6f 8a b8 37 Data Ascii: EjU2b<vifrno?lwMr#Rys~3DP:2&l$Q=bX3K9,z!q={Leno#727e@Q)O@'%xWWfC2`Q4D4FFb2-@D?_ _DFlRrn_:[b<W0-Eo7
2024-10-03 19:41:17 UTC	1024	IN	Data Raw: 5b f3 e2 e8 8e fd 06 47 09 0a 5f ea 50 6c b1 99 33 7f 5f 56 71 ee 39 50 47 2e 7a 6e 34 4e 1a 49 e4 8d 6a d6 8a 2e 44 8d 22 3a 12 d2 f2 70 5f 97 94 a0 b0 18 f9 e9 5a a5 21 3d 57 f3 e7 e4 e4 cc 6e e9 ea ad ac b0 4a f5 9d ab 8a 2f 36 45 31 e5 4f 64 0a 87 a2 8c 63 04 39 d3 54 ed 95 b3 b0 d1 e5 02 ee 2e 27 c3 b0 cd 27 88 f4 aa b2 a4 99 fe 09 ff a5 8d ca e3 66 e6 0c 93 4e 9d 0a b9 11 d6 22 4d 70 2d 11 b1 56 cc dd d0 a0 db 36 5e f5 9c 31 19 69 48 68 cb b4 71 14 55 a4 94 ca 7c 41 ad 84 ec de de ab 5a 3a c6 17 ad 94 f5 48 2a 3d e2 ae 1b 35 42 68 f8 08 86 8a f4 9e 97 91 6f 51 e8 93 7b e6 b9 e7 5c 15 9a 6b b1 c7 4d ab 62 02 74 59 31 3b 80 17 a5 dd 03 c9 34 3f 5a 5a 9c 7a b1 b7 18 1f 3b 8e c2 1e 86 b9 12 ea 25 4c c1 19 68 04 21 21 12 42 6d 20 53 8d 39 cc 69 fe a1 55 Data Ascii: [G_Pl3_Vq9PG.zn4NIj.D":p_Z!=WnJ/6E1Odc9T.''fN"Mp-V6^1iHhqU\|AZ:H*=5BhoQ{\kMbtY1;4?ZZz;%Lh!!Bm S9iU
2024-10-03 19:41:17 UTC	16384	IN	Data Raw: 08 2d 07 9f 57 06 76 ff ce 60 d7 ae a2 ae ec 3b 3d 4a 88 66 a3 d7 50 3d c6 84 3b a0 a4 f3 5c 07 11 1b 85 7d 6f e0 b9 51 6c 5f 71 04 29 f5 af d9 64 c6 43 13 7d 5c 93 15 8c 60 16 58 7c 3c bb 9a 9d 4c 6d 3c e2 bf 36 06 4c b4 40 5a 2b 1e 67 cc 75 8f 96 48 a1 ce 67 53 7d 3b 17 e4 43 c3 fc ac c1 23 ef ce 5b ae eb e1 51 f3 48 c5 79 29 f5 6d 81 e5 f1 7c ca 52 f2 5d 0b e6 33 a5 14 71 d7 da 64 ca 6b e8 4b 93 56 a0 30 81 c8 79 b8 b5 b0 88 8e c1 0b 8f 34 26 76 a0 99 de 6b 07 d1 f7 8a 90 fc 2c ba 0d 58 b6 34 24 3c fa a7 80 53 dd 89 32 70 aa 3b d1 57 85 53 dd 8d 7e c0 a9 de 0c a7 ba 1d e5 e1 54 e1 ce 2d c2 a9 7e 8c 4a e0 54 3f 46 d7 c0 a9 02 49 f8 87 87 53 dd d6 c9 d6 76 74 97 70 aa 2a 52 fc fb 96 c5 37 6f 47 16 7f 39 93 2c fe fa 8e 65 f1 97 df 48 16 7f fd ad 64 f1 e7 Data Ascii: -Wv`;=JfP=;\}oQl_q)dC}\`X\|<Lm<6L@Z+guHgS};C#[QHy)m\|R]3qdkKV0y4&vk,X4$<S2p;WS~T-~JT?FISvtp*R7oG9,eHd
2024-10-03 19:41:17 UTC	1024	IN	Data Raw: 8c 48 9e 0b 54 be 24 f2 69 86 0b 6f aa 6c c1 b0 5a bf b6 da 16 45 1f 68 3d 7b 6c d7 1e ff 62 d7 5a 4f 9f 60 fc 81 d6 af 0d 4b d8 9a 7f 5a 68 36 eb cc b0 5f 63 b9 8c 43 b2 56 55 33 77 36 24 84 f7 3f ae b1 e4 83 79 54 45 e3 e7 55 6e 05 af 38 23 7c e3 09 e7 ec 90 98 e7 d5 42 f3 5c a3 79 9a 6f 6b fe f7 b5 70 f5 10 0e 1c f2 0b a0 d8 28 08 48 19 15 65 ee 78 e3 fb 5f 57 98 ca e9 42 53 69 99 7d 31 ee d9 5d ee 43 42 3e 22 9c c9 b7 7f 7d fc 98 ae bf 44 ce b4 40 79 c6 49 53 1f 52 52 8d 76 8f 04 b8 29 7f b5 d5 73 d3 fa 65 8d 5b 49 d1 49 58 fb 06 fc f4 f8 3b e1 27 ca 7d 3e 5e a4 3a 42 be e4 d5 dd 68 7a f3 2d e8 ed 89 8e de 6a b0 26 33 ab b2 ac 9e 4f c4 5c ef c6 eb df b0 54 eb ff 42 4b 25 8f 05 3e 1c c7 85 6b 34 8c a2 d4 f8 f2 ae fe a0 97 b7 22 93 eb 82 2b f0 6b 4b e0 Data Ascii: HT$iolZEh={lbZO`KZh6_cCVU3w6$?yTEUn8#\|B\yokp(Hex_WBSi}1]CB>"}D@yISRRv)se[IIX;'}>^:Bhz-j&3O\TBK%>k4"+kK
2024-10-03 19:41:17 UTC	16384	IN	Data Raw: d1 0d 23 e4 96 17 6a a0 6a c8 4c 13 d2 9e d9 83 ff 0d 92 40 b9 af f7 bf 22 2d 55 b0 b6 3b 47 3e cd 2e 48 4b d5 c9 5c 06 9f bc c1 58 d7 c9 b4 5b b5 16 c3 d7 0b 5c 1d 83 66 ed f9 42 c3 58 55 24 fe c5 fe e6 6e 0c 63 62 b8 bd b7 e4 65 e6 8e 0e 11 c9 81 51 f3 1d 37 b7 39 21 de 4c 23 91 7b b5 4c eb e6 15 b8 ad 0a 8f 06 92 b3 07 87 1a 7b c0 72 16 9d 39 7d e2 0f 14 74 4e b2 28 e6 16 e4 ab 72 24 66 99 7a 4a 68 13 ab 65 1d 22 8f 3e 5a b2 25 cb b6 94 76 e0 2f 6a 05 fe 15 6d c0 4f a5 85 8a a4 3f 7b ae 0d 54 35 fc 0f 68 a5 8c 79 47 c4 51 40 d9 8f fa 22 15 bd ec 04 c3 8c 70 33 c3 48 11 13 e5 4b 86 19 64 0e dc ba df 30 ee 9b 34 df 76 03 d8 ae 2e f3 76 41 93 a6 5b b1 9f 6d 0c f9 ef 71 8f 2e 3c 99 b6 32 03 34 f8 bc 63 54 6b 1e 40 6f c6 2a cb b5 8c 4c 6b 27 57 c9 bc 2e bb Data Ascii: #jjL@"-U;G>.HK\X[\fBXU$ncbeQ79!L#{L{r9}tN(r$fzJhe">Z%v/jmO?{T5hyGQ@"p3HKd04v.vA[mq.<24cTk@o*Lk'W.

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://manage.gainapp.com/p/jg9gg5/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Windows Analysis Report
https://manage.gainapp.com/p/jg9gg5/

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:18 UTC	645	OUT	GET /api/posts/jg9gg5/public_link_preview/ HTTP/1.1 Host: manage.gainapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://manage.gainapp.com/p/jg9gg5/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csrftoken=4fhyruNodmeo1kLZ8eLTqKnfVCZEYD2k
2024-10-03 19:41:18 UTC	1108	IN	HTTP/1.1 404 Not Found Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1727984478&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=wCAj%2FLUWNaUItkYQ1RcpDL%2FP%2FsKiqz%2Frh%2F5JGxta5rk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1727984478&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=wCAj%2FLUWNaUItkYQ1RcpDL%2FP%2FsKiqz%2Frh%2F5JGxta5rk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Server: gunicorn/19.1.1 Date: Thu, 03 Oct 2024 19:41:18 GMT Content-Type: application/json Vary: Accept, Cookie, origin Allow: GET, HEAD, OPTIONS X-Client-Version: 8 X-Frame-Options: DENY Content-Length: 23 Strict-Transport-Security: max-age=15768000; includeSubDomains X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Set-Cookie: csrftoken=4fhyruNodmeo1kLZ8eLTqKnfVCZEYD2k; expires=Thu, 02 Oct 2025 19:41:18 GMT; Max-Age=31449600; Path=/; SameSite=Lax; Secure Via: 1.1 vegur
2024-10-03 19:41:18 UTC	23	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 66 6f 75 6e 64 2e 22 7d Data Ascii: {"detail":"Not found."}

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:18 UTC	488	OUT	GET /js/script.js HTTP/1.1 Host: plausible.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:18 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:41:18 GMT Content-Type: application/javascript Content-Length: 1407 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1082 CDN-PullZone: 682664 CDN-Uid: 153cb5b1-399a-48ef-b5bf-098c03770254 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Alt-Svc: h3=":9443"; ma=2592000 Cache-Control: public, must-revalidate, max-age=86400 application: 127.0.0.1 cross-origin-resource-policy: cross-origin permissions-policy: interest-cohort=() X-Content-Type-Options: nosniff CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/03/2024 11:42:43 CDN-EdgeStorageId: 1081 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 94c6116283ead38eb393aa2475dd9f34 CDN-Cache: HIT
2024-10-03 19:41:18 UTC	1407	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 6f 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 72 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 70 69 22 29 7c 7c 6e 65 77 20 55 52 4c 28 74 2e 73 72 63 29 2e 6f 72 69 67 69 6e 2b 22 2f 61 70 69 2f 65 76 65 6e 74 22 2c 6c 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 6f 6d 61 69 6e 22 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 74 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 49 67 6e 6f 72 69 6e 67 20 45 76 65 6e 74 3a 20 22 2b 74 29 2c 65 26 26 65 2e 63 61 6c 6c 62 61 63 6b 26 26 65 2e 63 61 6c 6c Data Ascii: !function(){"use strict";var a=window.location,o=window.document,t=o.currentScript,r=t.getAttribute("data-api")\|\|new URL(t.src).origin+"/api/event",l=t.getAttribute("data-domain");function s(t,e){t&&console.warn("Ignoring Event: "+t),e&&e.callback&&e.call

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:18 UTC	490	OUT	GET /widget.js HTTP/1.1 Host: cdn.headwayapp.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:18 UTC	822	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:41:18 GMT Content-Type: application/javascript Content-Length: 27503 Connection: close Last-Modified: Thu, 12 Sep 2024 06:37:55 GMT Access-Control-Allow-Origin: * X-hello: headway Cache-Control: public, max-age=60 ETag: W/"b1ea3a8ce92164144245a653b4a25553" Vary: Accept-Encoding Via: 1.1 fc486e72455da7c1d3be4472dd5ba8b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: TPQUmrMJ8DV_aZdhNjyDJ4UenFS3dO99p6rB3B-0pmdd1OQlbZgsIQ== Age: 5 X-77-NZT: EgwBw7WqEQG21AkAAAwBnJIhHwG3DgAAAA X-77-NZT-Ray: 4c15622478c8908e5ef3fe6637872227 X-Accel-Expires: @1727984538 X-Accel-Date: 1727981962 X-Accel-Date-Max: 1726508368 X-77-Cache: HIT X-77-Age: 2516 Server: CDN77-Turbo X-Cache: REVALIDATED X-Age: 2516 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-10-03 19:41:18 UTC	15562	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 73 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 73 2e 65 78 70 6f 72 74 73 2c 73 2c 73 2e 65 78 70 6f 72 74 73 2c 69 29 2c 73 2e 6c 3d 21 30 2c 73 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 65 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 69 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function i(n){if(e[n])return e[n].exports;var s=e[n]={i:n,l:!1,exports:{}};return t[n].call(s.exports,s,s.exports,i),s.l=!0,s.exports}i.m=t,i.c=e,i.d=function(t,e,n){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},i.r=fun
2024-10-03 19:41:18 UTC	11941	IN	Data Raw: 2c 74 68 69 73 2e 74 72 61 63 6b 45 76 65 6e 74 28 22 6f 70 65 6e 57 69 64 67 65 74 22 2c 7b 61 63 74 69 6f 6e 3a 22 75 73 65 72 22 7d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 53 68 6f 77 44 65 74 61 69 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 22 6f 6e 53 68 6f 77 44 65 74 61 69 6c 73 22 2c 74 29 2c 74 68 69 73 2e 74 72 61 63 6b 45 76 65 6e 74 28 22 72 65 61 64 3a 20 22 2b 74 2e 74 69 74 6c 65 2c 7b 61 63 74 69 6f 6e 3a 22 75 73 65 72 22 7d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 52 65 61 64 4d 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 22 6f 6e 52 65 61 64 4d Data Ascii: ,this.trackEvent("openWidget",{action:"user"})},n.prototype.onShowDetails=function(t){return this.triggerCallback("onShowDetails",t),this.trackEvent("read: "+t.title,{action:"user"})},n.prototype.onReadMore=function(t){return this.triggerCallback("onReadM

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:19 UTC	571	OUT	GET /img/gain-logo.svg HTTP/1.1 Host: gain-app-prod.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:19 UTC	454	IN	HTTP/1.1 200 OK x-amz-id-2: 5Zf8PDuN9VnO4tR3aIMsdfPIha2Kf5lqV4bfcC7VFzx3VGf2mZaB/wDNzRqtRwftL48eq1htOB/wVGrZiqCnvA== x-amz-request-id: QS02KDPFMFNW0WAA Date: Thu, 03 Oct 2024 19:41:20 GMT Last-Modified: Wed, 02 Oct 2024 23:16:32 GMT ETag: "54b5b4751152bca416eae476ed6e4116" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 2686 Connection: close
2024-10-03 19:41:19 UTC	1504	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 95 98 4b 6f 5b 47 12 85 f7 f9 15 3d 9c 4d 02 90 57 fd 7e 18 92 03 44 40 b2 71 56 93 c1 00 d9 69 2c 46 12 2c 8b 06 c5 d8 fe f9 f3 9d ba 94 7d e9 91 33 63 79 e1 cb c3 be d5 dd 55 a7 4e 55 f1 fc c7 8f 6f ef dd fb ed fe f1 6e f7 70 b1 0a 93 5f b9 ed c3 eb dd f5 dd c3 cd c5 ea 9f bf fd bc e9 ab 1f 5f 7e 77 fe f8 fe c6 7d b8 bb 3e dc 5e ac 4a 7a f7 71 e5 6e b7 77 37 b7 87 8b 55 6c fa f4 fe 6e fb e1 a7 dd c7 8b 95 77 de 95 e4 62 5b 2d 8d 86 95 63 9b 87 c7 8b d5 ed e1 f0 ee c5 d9 d9 87 0f 1f a6 0f 69 da ed 6f ce a2 f7 fe 0c f3 c7 25 2f 3e de df 3d bc 79 6e 61 18 63 9c d9 b7 ab 97 df 39 fe ce ff b6 d9 b8 5f b6 0f db fd d5 61 b7 7f e1 fe f1 66 7b 78 7d eb 4a 9c 8a fb be b6 5c c7 0f 6e e3 16 86 fe bd bb dd be bd bb 3a 5e 6f 7a bd 7b 7b Data Ascii: Ko[G=MW~D@qVi,F,}3cyUNUonp__~w}>^Jzqnw7Ulnwb[-cio%/>=ynac9_af{x}J\n:^oz{{
2024-10-03 19:41:19 UTC	1182	IN	Data Raw: 20 2d 66 35 6d 84 1f 50 89 4b 4a 9b 55 be 94 a6 3e 78 ca 6c 76 65 52 f2 55 9a 2e 81 fc c1 0d 39 8e d7 22 3d 82 f6 4b 48 0a 5e 20 57 91 5c 6b d0 d4 6b d0 b2 d1 89 51 62 f1 37 a4 1d 81 92 ce c6 10 8e da 7f b9 f1 e4 48 c7 b0 ea b1 ca 74 e8 18 ec 4e 38 58 81 e2 96 80 64 7b 52 37 46 73 54 a1 aa 64 80 9c ea 01 05 ae d2 0c 52 ca f3 fd 9c 27 f4 02 8d 0c e2 cc a4 62 40 8f 93 d2 84 fe 00 39 8f 90 0a 7d a2 cc fa b9 39 41 5e 6a 6e 72 06 55 87 1e 54 d4 a0 4b 63 f3 81 89 59 48 6a 2a 56 06 c8 c9 e4 43 01 a5 88 24 c9 8a 65 4f a5 a3 ed 46 62 c2 43 a4 47 99 6b 46 54 2f a9 88 93 a9 71 e0 23 4b 35 a4 21 18 0f 58 19 c6 6c a2 f2 dc d4 e0 88 07 b4 34 48 9a 9d 82 d6 15 99 d6 62 5c 9f a1 a8 c9 40 ac a5 cc 68 52 83 43 a3 07 3a d0 a8 04 71 75 8a d2 47 42 57 74 6b 88 5d 5a 33 32 d2 Data Ascii: -f5mPKJU>xlveRU.9"=KH^ W\kkQb7HtN8Xd{R7FsTdR'b@9}9A^jnrUTKcYHj*VC$eOFbCGkFT/q#K5!Xl4Hb\@hRC:quGBWtk]Z32

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:19 UTC	641	OUT	GET /fonts/figtree-normal-latin.woff2 HTTP/1.1 Host: gain-app-prod.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://manage.gainapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://gain-app-prod.s3.amazonaws.com/multipage.68d4f9c1c2978cd78694.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:19 UTC	602	IN	HTTP/1.1 200 OK x-amz-id-2: 0ozMIpgG6snJi55WGTUgz5za1dFxYDdi8Wlc4osQcx2nmOlS/ZJKCKyi/RMkxU+XXdqmvAIkqRoyR+6vCiMclg== x-amz-request-id: QS077TCDYZ0BWB8V Date: Thu, 03 Oct 2024 19:41:20 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Wed, 02 Oct 2024 23:16:39 GMT ETag: "36c815bffc8c9dc4bb7c9896e1fdbd80" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: font/woff2 Server: AmazonS3 Content-Length: 19476 Connection: close
2024-10-03 19:41:19 UTC	8308	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4c 14 00 13 00 00 00 00 99 38 00 00 4b a7 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 40 1b 9d 72 1c 86 6c 3f 48 56 41 52 85 69 06 60 3f 53 54 41 54 81 1c 27 2a 00 84 66 2f 5c 11 08 0a ff 34 e4 29 0b 84 18 00 30 e0 5c 01 36 02 24 03 88 2c 04 20 05 85 34 07 88 77 1b 4c 88 25 d3 cd 1d 22 b7 0d a8 e9 41 e7 4d 92 27 8a 60 e3 48 01 80 b9 4f b8 e3 61 e3 30 f8 30 5f 98 fd ff 97 04 2d c6 10 be 76 a0 ba 0c 8b 62 51 4b 17 0b 5b 55 16 42 51 ac 16 25 03 86 01 0c 9b 9e 19 a1 34 aa f6 44 c2 90 71 33 de 39 3a 0f ca be 47 1d fe b6 5f bf 4f fa 4d f7 60 54 5f a7 32 55 3c 87 e9 2a 5f 83 6d a1 e5 eb 53 a3 8d 11 d4 0a 0b 55 85 40 0c c5 19 c1 41 a0 c4 f2 e0 ff c3 67 f1 06 c6 7c 9c 09 f1 ce 19 d8 36 b6 4f 32 49 7b Data Ascii: wOF2L8K@rl?HVARi`?STAT'f/\4)0\6$, 4wL%"AM'`HOa00_-vbQK[UBQ%4Dq39:G_OM`T_2U<_mSU@Ag\|6O2I{
2024-10-03 19:41:19 UTC	11168	IN	Data Raw: 4b cb 6d 62 6a b5 48 d6 24 5c f9 d5 eb 0c c8 a2 53 c8 22 74 1d 4e 4d 20 68 8b 73 cb 98 0b 7c 2a 42 02 90 30 a1 46 f3 40 01 29 82 3c 43 8e 92 50 92 10 4e fa 5f 47 14 08 e0 04 11 57 03 6d ff a5 a7 75 7c a1 0a 9f 50 06 ed 03 d6 fe 6e 8b 16 31 46 1d 01 21 de 78 e9 be c2 cf 9c cd 2c 5e 82 49 fb 32 b0 df 52 e4 72 f1 d5 51 7f fc 1f e1 85 8d 67 c6 48 6b 17 6e a7 ca 7e a4 d3 de 67 1f e8 b6 60 e9 b9 62 a2 e1 ce 25 27 5e d3 36 0b c4 87 81 be 38 c8 5a e4 74 73 c1 de 7c 62 35 94 4a 42 ab 09 82 a1 54 4a 29 51 ef 99 4c b9 92 c9 74 cb 11 a9 5b c8 0b 20 88 bc d3 2e a1 54 e0 17 c9 ae 7b 2e 5d df 4c 86 f4 56 95 12 b7 41 e4 ed df 6d 5f 7b 3d 14 80 38 d9 05 0e 79 43 30 64 dd 10 f3 f9 d6 5b 3d 14 0a 8a 4a 1b 20 7b 12 4a 30 8d 46 66 02 92 31 e3 50 8b 4a 23 0e cb 71 19 c4 4c a8 Data Ascii: KmbjH$\S"tNM hs\|*B0F@)<CPN_GWmu\|Pn1F!x,^I2RrQgHkn~g`b%'^68Zts\|b5JBTJ)QLt[ .T{.]LVAm_{=8yC0d[=J {J0Ff1PJ#qL

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:19 UTC	506	OUT	GET /libs/mixpanel-2-latest.min.js HTTP/1.1 Host: cdn.mxpnl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:19 UTC	872	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:41:19 GMT Cache-Control: public,max-age=600 Expires: Thu, 03 Oct 2024 19:51:19 GMT Last-Modified: Tue, 27 Aug 2024 18:10:17 GMT ETag: W/"032ee7cfb9a87a2c861ff18815754842" Vary: Accept-Encoding x-goog-generation: 1724782217794014 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 19057 Content-Type: text/javascript x-goog-hash: crc32c=rciEWw== x-goog-hash: md5=Ay7nz7moeiyGH/GIFXVIQg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AD-8ljvZX30G-C_FT6guqZuPUTV1HPRHYlRn-jxDCXnxluq5ttzqtec1nbxEx-L7h8JTXoJlcQ8 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6d 3d 21 30 2c 72 3d 6e 75 6c 6c 2c 44 3d 21 31 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 69 66 28 21 61 2e 47 63 29 6c 61 3d 61 2e 47 63 3d 6d 2c 6d 61 3d 44 2c 63 2e 61 28 46 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 74 63 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 72 79 7b 76 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 64 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 31 29 3b 72 65 74 75 72 6e 7d 61 28 29 7d 69 66 28 76 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 22 63 6f 6d Data Ascii: 8000(function() {var l=void 0,m=!0,r=null,D=!1;(function(){function Ba(){function a(){if(!a.Gc)la=a.Gc=m,ma=D,c.a(F,function(a){a.tc()})}function b(){try{v.documentElement.doScroll("left")}catch(d){setTimeout(b,1);return}a()}if(v.addEventListener)"com
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 73 2e 44 64 3d 44 3b 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 70 65 72 73 69 73 74 65 6e 63 65 5f 6e 61 6d 65 3f 22 6d 70 5f 22 2b 61 2e 70 65 72 73 69 73 74 65 6e 63 65 5f 6e 61 6d 65 3a 22 6d 70 5f 22 2b 61 2e 74 6f 6b 65 6e 2b 22 5f 6d 69 78 70 61 6e 65 6c 22 3b 76 61 72 20 62 3d 61 2e 70 65 72 73 69 73 74 65 6e 63 65 3b 69 66 28 22 63 6f 6f 6b 69 65 22 21 3d 3d 62 26 26 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 21 3d 3d 62 29 6f 2e 42 28 22 55 6e 6b 6e 6f 77 6e 20 70 65 72 73 69 73 74 65 6e 63 65 20 74 79 70 65 20 22 2b 62 2b 22 3b 20 66 61 6c 6c 69 6e 67 20 62 61 63 6b 20 74 6f 20 63 6f 6f 6b 69 65 22 29 2c 0a 62 3d 61 2e 70 65 72 73 69 73 74 65 6e 63 65 3d 22 63 6f 6f 6b 69 65 22 3b 74 68 69 73 2e 6a 3d 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3d 3d 3d Data Ascii: s.Dd=D;this.name=a.persistence_name?"mp_"+a.persistence_name:"mp_"+a.token+"_mixpanel";var b=a.persistence;if("cookie"!==b&&"localStorage"!==b)o.B("Unknown persistence type "+b+"; falling back to cookie"),b=a.persistence="cookie";this.j="localStorage"===
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 75 62 73 74 72 69 6e 67 28 32 2c 31 30 29 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 75 62 73 74 72 69 6e 67 28 32 2c 31 30 29 3b 72 65 74 75 72 6e 20 61 3f 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 29 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 2c 62 29 7b 69 66 28 66 61 21 3d 3d 72 26 26 21 62 29 72 65 74 75 72 6e 20 66 61 3b 76 61 72 20 64 3d 6d 3b 74 72 79 7b 76 61 72 20 61 3d 61 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2c 63 3d 22 5f 5f 6d 70 6c 73 73 5f 22 2b 65 61 28 38 29 3b 61 2e 73 65 74 49 74 65 6d 28 63 2c 22 78 79 7a 22 29 3b 22 78 79 7a 22 21 3d 3d 61 2e 67 65 74 49 74 65 6d 28 63 29 26 26 Data Ascii: Math.random().toString(36).substring(2,10)+Math.random().toString(36).substring(2,10);return a?b.substring(0,a):b}function U(a,b){if(fa!==r&&!b)return fa;var d=m;try{var a=a\|\|window.localStorage,c="__mplss_"+ea(8);a.setItem(c,"xyz");"xyz"!==a.getItem(c)&&
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 61 76 69 67 61 74 6f 72 7c 7c 7b 7d 2c 64 3d 44 3b 63 2e 61 28 5b 62 2e 64 6f 4e 6f 74 54 72 61 63 6b 2c 62 2e 6d 73 44 6f 4e 6f 74 54 72 61 63 6b 2c 61 2e 64 6f 4e 6f 74 54 72 61 63 6b 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 2e 69 28 5b 6d 2c 31 2c 22 31 22 2c 22 79 65 73 22 5d 2c 61 29 26 26 28 64 3d 6d 29 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 2c 62 2c 64 29 7b 21 63 2e 58 61 28 62 29 7c 7c 21 62 2e 6c 65 6e 67 74 68 3f 6f 2e 65 72 72 6f 72 28 22 67 64 70 72 2e 22 2b 28 61 3f 22 6f 70 74 49 6e 22 3a 22 6f 70 74 4f 75 74 22 29 2b 22 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 6e 20 69 6e 76 61 6c 69 64 20 74 6f 6b 65 6e 22 29 3a 28 64 3d 64 7c 7c 7b 7d 2c 56 28 64 29 2e 73 65 74 28 57 28 62 2c 64 29 2c 61 3f 31 3a Data Ascii: avigator\|\|{},d=D;c.a([b.doNotTrack,b.msDoNotTrack,a.doNotTrack],function(a){c.i([m,1,"1","yes"],a)&&(d=m)});return d}function ta(a,b,d){!c.Xa(b)\|\|!b.length?o.error("gdpr."+(a?"optIn":"optOut")+" called with an invalid token"):(d=d\|\|{},V(d).set(W(b,d),a?1:
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 79 2e 6c 6f 67 28 61 29 7d 29 7d 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 4a 26 26 21 63 2e 65 28 79 29 26 26 79 29 7b 76 61 72 20 61 3d 5b 22 4d 69 78 70 61 6e 65 6c 20 77 61 72 6e 69 6e 67 3a 22 5d 2e 63 6f 6e 63 61 74 28 63 2e 51 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 0a 74 72 79 7b 79 2e 77 61 72 6e 2e 61 70 70 6c 79 28 79 2c 61 29 7d 63 61 74 63 68 28 62 29 7b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 79 2e 77 61 72 6e 28 61 29 7d 29 7d 7d 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 4a 26 26 21 63 2e 65 28 79 29 26 26 79 29 7b 76 61 72 20 61 3d 5b 22 4d 69 78 70 61 6e 65 6c 20 65 72 72 6f 72 3a 22 5d 2e 63 6f 6e 63 61 74 28 63 2e 51 28 61 Data Ascii: uments,function(a){y.log(a)})}},warn:function(){if(J&&!c.e(y)&&y){var a=["Mixpanel warning:"].concat(c.Q(arguments));try{y.warn.apply(y,a)}catch(b){c.a(a,function(a){y.warn(a)})}}},error:function(){if(J&&!c.e(y)&&y){var a=["Mixpanel error:"].concat(c.Q(a
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 5d 3a 61 2e 51 3f 61 2e 51 28 29 3a 63 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 63 2e 4f 63 28 61 29 3f 4c 2e 63 61 6c 6c 28 61 29 3a 63 2e 42 64 28 61 29 7d 3b 63 2e 6d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 79 61 26 26 61 2e 6d 61 70 3d 3d 3d 79 61 29 72 65 74 75 72 6e 20 61 2e 6d 61 70 28 62 2c 64 29 3b 76 61 72 20 66 3d 5b 5d 3b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 70 75 73 68 28 62 2e 63 61 6c 6c 28 64 2c 61 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 3b 63 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 69 66 28 61 3d 3d 3d 72 29 72 65 74 75 72 6e 20 62 3b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 5b 62 2e 6c 65 6e 67 74 68 5d 3d 63 7d 29 3b 72 65 74 Data Ascii: ]:a.Q?a.Q():c.isArray(a)\|\|c.Oc(a)?L.call(a):c.Bd(a)};c.map=function(a,b,d){if(ya&&a.map===ya)return a.map(b,d);var f=[];c.a(a,function(a){f.push(b.call(d,a))});return f};c.keys=function(a){var b=[];if(a===r)return b;c.a(a,function(a,c){b[b.length]=c});ret
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 61 2c 66 29 7b 63 2e 58 61 28 61 29 26 26 30 3c 61 2e 6c 65 6e 67 74 68 26 26 28 62 5b 66 5d 3d 61 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 63 2e 74 72 75 6e 63 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3b 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 64 3d 61 2e 73 6c 69 63 65 28 30 2c 62 29 3a 63 2e 69 73 41 72 72 61 79 28 61 29 3f 28 64 3d 5b 5d 2c 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 70 75 73 68 28 63 2e 74 72 75 6e 63 61 74 65 28 61 2c 62 29 29 7d 29 29 3a 63 2e 67 28 61 29 3f 28 64 3d 7b 7d 2c 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 68 29 7b 64 5b 68 5d 3d 63 2e 74 72 75 6e 63 61 74 65 28 61 2c 62 29 7d 29 29 3a 64 3d 61 3b 72 65 74 75 72 6e 20 64 7d 3b 63 2e 69 61 3d 66 75 Data Ascii: a,f){c.Xa(a)&&0<a.length&&(b[f]=a)});return b};c.truncate=function(a,b){var d;"string"===typeof a?d=a.slice(0,b):c.isArray(a)?(d=[],c.a(a,function(a){d.push(c.truncate(a,b))})):c.g(a)?(d={},c.a(a,function(a,h){d[h]=c.truncate(a,b)})):d=a;return d};c.ia=fu
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 22 65 22 29 2c 6d 3b 63 61 73 65 20 22 66 22 3a 72 65 74 75 72 6e 20 68 28 22 66 22 29 2c 0a 68 28 22 61 22 29 2c 68 28 22 6c 22 29 2c 68 28 22 73 22 29 2c 68 28 22 65 22 29 2c 44 3b 63 61 73 65 20 22 6e 22 3a 72 65 74 75 72 6e 20 68 28 22 6e 22 29 2c 68 28 22 75 22 29 2c 68 28 22 6c 22 29 2c 68 28 22 6c 22 29 2c 72 7d 67 28 27 55 6e 65 78 70 65 63 74 65 64 20 22 27 2b 69 2b 27 22 27 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 66 6f 72 28 3b 69 26 26 22 20 22 3e 3d 69 3b 29 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 2c 62 2c 64 3d 22 22 2c 63 3b 69 66 28 27 22 27 3d 3d 3d 69 29 66 6f 72 28 3b 68 28 29 3b 29 7b 69 66 28 27 22 27 3d 3d 3d 69 29 72 65 74 75 72 6e 20 68 28 29 2c 64 3b 69 66 28 22 5c 5c 22 3d 3d 3d 69 29 69 66 28 68 28 Data Ascii: "e"),m;case "f":return h("f"),h("a"),h("l"),h("s"),h("e"),D;case "n":return h("n"),h("u"),h("l"),h("l"),r}g('Unexpected "'+i+'"')}function b(){for(;i&&" ">=i;)h()}function d(){var a,b,d="",c;if('"'===i)for(;h();){if('"'===i)return h(),d;if("\\"===i)if(h(
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 75 72 6e 20 64 28 29 3b 63 61 73 65 20 22 2d 22 3a 72 65 74 75 72 6e 20 63 28 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 30 22 3c 3d 69 26 26 22 39 22 3e 3d 69 3f 63 28 29 3a 61 28 29 7d 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 70 3d 61 3b 65 3d 30 3b 69 3d 22 20 22 3b 61 3d 73 28 29 3b 62 28 29 3b 69 26 26 67 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 22 29 3b 72 65 74 75 72 6e 20 61 7d 7d 28 29 3b 63 2e 42 63 3d 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 64 2c 66 2c 68 2c 67 3d 30 2c 65 3d 30 2c 69 3d 22 22 2c 69 3d 5b 5d 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 63 2e 41 64 28 61 29 3b 64 6f 20 62 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 67 2b 2b 29 2c 64 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 Data Ascii: urn d();case "-":return c();default:return"0"<=i&&"9">=i?c():a()}};return function(a){p=a;e=0;i=" ";a=s();b();i&&g("Syntax error");return a}}();c.Bc=function(a){var b,d,f,h,g=0,e=0,i="",i=[];if(!a)return a;a=c.Ad(a);do b=a.charCodeAt(g++),d=a.charCodeAt(
2024-10-03 19:41:19 UTC	1390	IN	Data Raw: 6e 20 62 28 29 7b 76 61 72 20 61 3d 31 2a 6e 65 77 20 44 61 74 65 2c 62 3b 69 66 28 6e 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 6e 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 29 62 3d 6e 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 65 6c 73 65 20 66 6f 72 28 62 3d 30 3b 61 3d 3d 31 2a 6e 65 77 20 44 61 74 65 3b 29 62 2b 2b 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 62 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 28 5a 2e 68 65 69 67 68 74 2a 5a 2e 77 69 64 74 68 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 72 65 74 75 72 6e 20 62 28 29 2b 22 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 Data Ascii: n b(){var a=1new Date,b;if(n.performance&&n.performance.now)b=n.performance.now();else for(b=0;a==1new Date;)b++;return a.toString(16)+Math.floor(b).toString(16)}return function(){var c=(Z.height*Z.width).toString(16);return b()+"-"+Math.random().toStri

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:19 UTC	501	OUT	GET /sdks/OneSignalSDK.js HTTP/1.1 Host: cdn.onesignal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:19 UTC	801	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:41:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=9204 access-control-allow-headers: OneSignal-Subscription-Id etag: W/"09282956186c8515ef0d208902803581" via: 1.1 google CF-Cache-Status: HIT Age: 1882 Expires: Sun, 06 Oct 2024 19:41:19 GMT Cache-Control: public, max-age=259200 Set-Cookie: __cf_bm=CgraOumI9CiOYcolQyNK5F0z35Sk4mYtjNhCBf6I8OE-1727984479-1.0.1.1-CucO09XJZRG59AuS.xIwaUGlAOiDyNGLCjK6Edw_zujndzDx9pRC2_mYXw5oBR3eSDgXNkKzTQArcffZCMekSw; path=/; expires=Thu, 03-Oct-24 20:11:19 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ccf68b359e241cd-EWR
2024-10-03 19:41:19 UTC	568	IN	Data Raw: 32 33 63 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 69 66 28 74 5b 6f 5d 29 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 Data Ascii: 23cb!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerab
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4f 6e 65 53 69 67 6e 61 6c 53 74 75 62 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 56 45 52 53 49 4f 4e 3d 4e 75 6d 62 65 72 28 31 35 31 36 30 36 29 2c 74 68 69 73 2e 6c 6f 67 3d 7b 73 65 74 4c 65 76 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 63 75 72 72 65 6e 74 4c 6f 67 4c 65 76 65 6c 3d 65 7d 7d 2c 74 68 69 73 2e 73 65 74 75 70 53 74 75 62 46 75 6e 63 74 69 6f 6e 73 28 65 2e 46 55 4e 43 54 49 4f 4e 5f 4c 49 53 54 5f 54 4f 5f 53 54 55 42 2c 74 68 69 73 2e 73 74 75 62 46 75 6e 63 74 69 6f 6e 2c Data Ascii: .defineProperty(t,"__esModule",{value:!0}),t.OneSignalStub=void 0;var o=function(){function e(t){var n=this;this.VERSION=Number(151606),this.log={setLevel:function(e){n.currentLogLevel=e}},this.setupStubFunctions(e.FUNCTION_LIST_TO_STUB,this.stubFunction,
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 78 74 65 72 6e 61 6c 55 73 65 72 49 64 22 2c 22 67 65 74 45 78 74 65 72 6e 61 6c 55 73 65 72 49 64 22 2c 22 70 72 6f 76 69 64 65 55 73 65 72 43 6f 6e 73 65 6e 74 22 2c 22 69 73 4f 70 74 65 64 4f 75 74 22 2c 22 67 65 74 45 6d 61 69 6c 49 64 22 2c 22 67 65 74 53 4d 53 49 64 22 2c 22 73 65 6e 64 4f 75 74 63 6f 6d 65 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 73 68 6f 75 6c 64 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 Data Ascii: xternalUserId","getExternalUserId","provideUserConsent","isOptedOut","getEmailId","getSMSId","sendOutcome"]},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var o=function(){function e(){}return e.shouldLog=function(){try{if(
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 22 29 3b 76 61 72 20 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 2c 22 6d 65 73 73 61 67 65 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 76 61 6c 75 65 3a 6e 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f Data Ascii: e,new n)});Object.defineProperty(t,"__esModule",{value:!0});var i=function(e){function t(n){void 0===n&&(n="");var o=e.call(this,n)\|\|this;return Object.defineProperty(o,"message",{configurable:!0,enumerable:!1,value:n,writable:!0}),Object.defineProperty(o
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 72 20 6f 2c 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 7c 7c 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6f 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 29 28 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e Data Ascii: r o,r=this&&this.__extends\|\|(o=function(e,t){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])})(e,t)},function(e,t){function n
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 7c 7c 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6f 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 29 28 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 Data Ascii: this&&this.__extends\|\|(o=function(e,t){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])})(e,t)},function(e,t){function n(){thi
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 6e 73 26 26 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 22 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 73 75 70 70 6f 72 74 73 56 61 70 69 64 50 75 73 68 3d 74 2e 69 73 4d 61 63 4f 53 53 61 66 61 72 69 49 6e 49 66 72 61 6d 65 3d 74 2e 69 73 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 75 70 70 6f 72 74 65 64 3d 76 6f 69 64 20 30 2c 74 2e 69 73 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: ns&&PushSubscriptionOptions.prototype.hasOwnProperty("applicationServerKey")}Object.defineProperty(t,"__esModule",{value:!0}),t.supportsVapidPush=t.isMacOSSafariInIframe=t.isPushNotificationsSupported=void 0,t.isPushNotificationsSupported=function(){retur
2024-10-03 19:41:19 UTC	389	IN	Data Raw: 78 28 29 2b 22 4f 6e 65 53 69 67 6e 61 6c 53 44 4b 57 6f 72 6b 65 72 2e 6a 73 3f 76 3d 22 2b 65 2e 56 45 52 53 49 4f 4e 29 3a 6f 2e 69 73 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 75 70 70 6f 72 74 65 64 28 29 3f 28 65 2e 61 64 64 53 63 72 69 70 74 54 6f 50 61 67 65 28 65 2e 67 65 74 50 61 74 68 41 6e 64 50 72 65 66 69 78 28 29 2b 22 4f 6e 65 53 69 67 6e 61 6c 50 61 67 65 53 44 4b 45 53 36 2e 6a 73 3f 76 3d 22 2b 65 2e 56 45 52 53 49 4f 4e 29 2c 65 2e 61 64 64 4f 6e 65 53 69 67 6e 61 6c 50 61 67 65 45 53 36 53 44 4b 53 74 75 62 28 29 29 3a 65 2e 61 64 64 4f 6e 65 53 69 67 6e 61 6c 50 61 67 65 45 53 35 53 44 4b 53 74 75 62 28 29 7d 2c 65 7d 28 29 3b 74 2e 4f 6e 65 53 69 67 6e 61 6c 53 68 69 6d 4c 6f 61 64 65 72 3d 61 2c 61 2e 56 45 52 53 49 4f Data Ascii: x()+"OneSignalSDKWorker.js?v="+e.VERSION):o.isPushNotificationsSupported()?(e.addScriptToPage(e.getPathAndPrefix()+"OneSignalPageSDKES6.js?v="+e.VERSION),e.addOneSignalPageES6SDKStub()):e.addOneSignalPageES5SDKStub()},e}();t.OneSignalShimLoader=a,a.VERSIO
2024-10-03 19:41:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:19 UTC	499	OUT	GET /growsurf.js?v=2.0.0 HTTP/1.1 Host: app.growsurf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:19 UTC	588	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:41:19 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-dns-prefetch-control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains x-download-options: noopen x-content-type-options: nosniff x-xss-protection: 1; mode=block vary: Accept-Encoding Cache-Control: public, max-age=14400 last-modified: Thu, 03 Oct 2024 09:22:17 GMT etag: W/"23d9f-19251afed28" CF-Cache-Status: REVALIDATED Server: cloudflare CF-RAY: 8ccf68b35d91423a-EWR
2024-10-03 19:41:19 UTC	781	IN	Data Raw: 37 64 35 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 65 2c 74 2e 63 3d 72 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 74 2e 6f 28 65 2c 72 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 74 Data Ascii: 7d54!function(e){var r={};function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:n})},t
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 74 2e 64 28 72 2c 22 61 22 2c 72 29 2c 72 7d 2c 74 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 72 29 7d 2c 74 2e 70 3d 22 22 2c 74 28 74 2e 73 3d 22 4f 31 34 50 22 29 7d 28 7b 22 2b 61 75 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 76 61 72 20 6e 3d 74 28 22 58 4b 46 55 22 29 2c 6f 3d 74 28 22 6c 76 74 6d 22 29 3b 6e 28 6e 2e 53 2c 22 4d 61 74 68 22 2c 7b 63 62 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 65 3d 2b 65 29 2a 4d 61 74 68 2e 70 6f 77 28 4d 61 74 68 2e 61 62 Data Ascii: fault}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,r){return Object.prototype.hasOwnProperty.call(e,r)},t.p="",t(t.s="O14P")}({"+auO":function(e,r,t){var n=t("XKFU"),o=t("lvtm");n(n.S,"Math",{cbrt:function(e){return o(e=+e)*Math.pow(Math.ab
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 28 22 4f 47 74 66 22 29 28 22 69 74 61 6c 69 63 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 22 69 22 2c 22 22 2c 22 22 29 7d 7d 29 29 7d 2c 22 30 59 57 4d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 76 61 72 20 6e 3d 74 28 22 45 65 6d 48 22 29 2c 6f 3d 74 28 22 4f 50 33 59 22 29 2c 61 3d 74 28 22 61 61 67 78 22 29 2c 69 3d 74 28 22 58 4b 46 55 22 29 2c 73 3d 74 28 22 30 2f 52 34 22 29 2c 6c 3d 74 28 22 79 33 77 39 22 29 3b 69 28 69 2e 53 2c 22 52 65 66 6c 65 63 74 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 74 29 7b 76 61 72 20 69 2c 63 2c 66 3d 61 72 67 Data Ascii: tion(e,r,t){"use strict";t("OGtf")("italics",(function(e){return function(){return e(this,"i","","")}}))},"0YWM":function(e,r,t){var n=t("EemH"),o=t("OP3Y"),a=t("aagx"),i=t("XKFU"),s=t("0/R4"),l=t("y3w9");i(i.S,"Reflect",{get:function e(r,t){var i,c,f=arg
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 7d 7d 2c 22 31 50 67 79 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 66 61 34 36 35 38 63 64 66 34 30 30 32 65 38 65 39 35 65 64 65 34 64 66 35 62 37 37 33 36 33 38 2e 73 76 67 22 7d 2c 22 31 54 73 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 72 2c 64 6f 6e 65 3a 21 21 65 7d 7d 7d 2c 22 31 67 65 51 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 76 61 72 20 6e 3d 74 28 22 48 44 37 32 22 29 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6e 3d 5b 5b 65 2e 69 2c 6e 2c 22 22 5d 5d 29 3b 76 61 72 20 6f 3d 7b 68 6d 72 3a 21 30 2c 74 72 61 6e 73 66 6f 72 6d 3a 75 6e 64 Data Ascii: }},"1Pgy":function(e,r,t){e.exports=t.p+"fa4658cdf4002e8e95ede4df5b773638.svg"},"1TsA":function(e,r){e.exports=function(e,r){return{value:r,done:!!e}}},"1geQ":function(e,r,t){var n=t("HD72");"string"==typeof n&&(n=[[e.i,n,""]]);var o={hmr:!0,transform:und
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 2c 6c 29 3a 73 2e 63 61 6c 6c 28 6e 2c 72 2c 6c 29 7d 7d 29 7d 2c 22 34 4c 69 44 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 74 28 22 64 79 5a 58 22 29 2c 6f 3d 74 28 22 58 4b 46 55 22 29 2c 61 3d 74 28 22 4b 72 6f 4a 22 29 2c 69 3d 74 28 22 33 4c 79 6a 22 29 2c 73 3d 74 28 22 5a 36 76 46 22 29 2c 6c 3d 74 28 22 53 6c 6b 59 22 29 2c 63 3d 74 28 22 39 67 58 37 22 29 2c 66 3d 74 28 22 30 2f 52 34 22 29 2c 67 3d 74 28 22 65 65 56 71 22 29 2c 64 3d 74 28 22 58 4d 56 68 22 29 2c 75 3d 74 28 22 66 79 44 71 22 29 2c 70 3d 74 28 22 58 62 7a 69 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 62 2c 68 2c 6d 29 7b 76 61 72 20 77 3d 6e 5b 65 5d 2c 78 3d 77 2c 76 3d Data Ascii: ,l):s.call(n,r,l)}})},"4LiD":function(e,r,t){"use strict";var n=t("dyZX"),o=t("XKFU"),a=t("KroJ"),i=t("3Lyj"),s=t("Z6vF"),l=t("SlkY"),c=t("9gX7"),f=t("0/R4"),g=t("eeVq"),d=t("XMVh"),u=t("fyDq"),p=t("Xbzi");e.exports=function(e,r,t,b,h,m){var w=n[e],x=w,v=
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 73 76 67 22 7d 2c 22 35 50 66 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 76 61 72 20 6e 3d 74 28 22 53 2f 6a 2f 22 29 2c 6f 3d 74 28 22 4f 50 33 59 22 29 3b 74 28 22 58 74 72 38 22 29 28 22 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 6e 28 65 29 29 7d 7d 29 29 7d 2c 22 35 6f 4d 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3f 65 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2b 24 2f 2c 22 22 29 2b 22 2f 22 2b 72 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 2b 2f 2c 22 22 29 3a 65 7d 7d 2c 22 Data Ascii: svg"},"5Pf0":function(e,r,t){var n=t("S/j/"),o=t("OP3Y");t("Xtr8")("getPrototypeOf",(function(){return function(e){return o(n(e))}}))},"5oMp":function(e,r,t){"use strict";e.exports=function(e,r){return r?e.replace(/\/+$/,"")+"/"+r.replace(/^\/+/,""):e}},"
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 65 3d 5b 65 5b 30 5d 3e 3e 3e 31 36 2c 36 35 35 33 35 26 65 5b 30 5d 2c 65 5b 31 5d 3e 3e 3e 31 36 2c 36 35 35 33 35 26 65 5b 31 5d 5d 2c 72 3d 5b 72 5b 30 5d 3e 3e 3e 31 36 2c 36 35 35 33 35 26 72 5b 30 5d 2c 72 5b 31 5d 3e 3e 3e 31 36 2c 36 35 35 33 35 26 72 5b 31 5d 5d 3b 76 61 72 20 74 3d 5b 30 2c 30 2c 30 2c 30 5d 3b 72 65 74 75 72 6e 20 74 5b 33 5d 2b 3d 65 5b 33 5d 2b 72 5b 33 5d 2c 74 5b 32 5d 2b 3d 74 5b 33 5d 3e 3e 3e 31 36 2c 74 5b 33 5d 26 3d 36 35 35 33 35 2c 74 5b 32 5d 2b 3d 65 5b 32 5d 2b 72 5b 32 5d 2c 74 5b 31 5d 2b 3d 74 5b 32 5d 3e 3e 3e 31 36 2c 74 5b 32 5d 26 3d 36 35 35 33 35 2c Data Ascii: ct.prototype.toString.call(e)});var e=function(e,r){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],r=[r[0]>>>16,65535&r[0],r[1]>>>16,65535&r[1]];var t=[0,0,0,0];return t[3]+=e[3]+r[3],t[2]+=t[3]>>>16,t[3]&=65535,t[2]+=e[2]+r[2],t[1]+=t[2]>>>16,t[2]&=65535,
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 37 33 35 33 31 33 2c 32 38 39 35 35 39 35 30 39 5d 2c 62 3d 5b 31 32 39 31 31 36 39 30 39 31 2c 36 35 38 38 37 31 31 36 37 5d 2c 68 3d 30 3b 68 3c 63 3b 68 2b 3d 31 36 29 64 3d 5b 32 35 35 26 69 2e 63 68 61 72 43 6f 64 65 41 74 28 68 2b 34 29 7c 28 32 35 35 26 69 2e 63 68 61 72 43 6f 64 65 41 74 28 68 2b 35 29 29 3c 3c 38 7c 28 32 35 35 26 69 2e 63 68 61 72 43 6f 64 65 41 74 28 68 2b 36 29 29 3c 3c 31 36 7c 28 32 35 35 26 69 2e 63 68 61 72 43 6f 64 65 41 74 28 68 2b 37 29 29 3c 3c 32 34 2c 32 35 35 26 69 2e 63 68 61 72 43 6f 64 65 41 74 28 68 29 7c 28 32 35 35 26 69 2e 63 68 61 72 43 6f 64 65 41 74 28 68 2b 31 29 29 3c 3c 38 7c 28 32 35 35 26 69 2e 63 68 61 72 43 6f 64 65 41 74 28 68 2b 32 29 29 3c 3c 31 36 7c 28 32 35 35 26 69 2e 63 68 61 72 43 6f 64 65 Data Ascii: 735313,289559509],b=[1291169091,658871167],h=0;h<c;h+=16)d=[255&i.charCodeAt(h+4)\|(255&i.charCodeAt(h+5))<<8\|(255&i.charCodeAt(h+6))<<16\|(255&i.charCodeAt(h+7))<<24,255&i.charCodeAt(h)\|(255&i.charCodeAt(h+1))<<8\|(255&i.charCodeAt(h+2))<<16\|(255&i.charCode
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 64 3d 72 28 64 2c 62 29 2c 66 3d 6f 28 66 2c 64 29 7d 72 65 74 75 72 6e 20 66 3d 6f 28 66 2c 5b 30 2c 69 2e 6c 65 6e 67 74 68 5d 29 2c 67 3d 6f 28 67 2c 5b 30 2c 69 2e 6c 65 6e 67 74 68 5d 29 2c 66 3d 65 28 66 2c 67 29 2c 67 3d 65 28 67 2c 66 29 2c 66 3d 61 28 66 29 2c 67 3d 61 28 67 29 2c 66 3d 65 28 66 2c 67 29 2c 67 3d 65 28 67 2c 66 29 2c 28 22 30 30 30 30 30 30 30 30 22 2b 28 66 5b 30 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 2b 28 22 30 30 30 30 30 30 30 30 22 2b 28 66 5b 31 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 2b 28 22 30 30 30 30 30 30 30 30 22 2b 28 67 5b 30 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 Data Ascii: d=r(d,b),f=o(f,d)}return f=o(f,[0,i.length]),g=o(g,[0,i.length]),f=e(f,g),g=e(g,f),f=a(f),g=a(g),f=e(f,g),g=e(g,f),("00000000"+(f[0]>>>0).toString(16)).slice(-8)+("00000000"+(f[1]>>>0).toString(16)).slice(-8)+("00000000"+(g[0]>>>0).toString(16)).slice(-8)
2024-10-03 19:41:19 UTC	1369	IN	Data Raw: 61 69 6c 48 65 69 67 68 74 29 7b 76 61 72 20 72 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 2c 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 57 69 64 74 68 5d 3b 72 65 74 75 72 6e 20 65 2e 73 63 72 65 65 6e 2e 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 26 26 72 2e 73 6f 72 74 28 29 2e 72 65 76 65 72 73 65 28 29 2c 72 7d 72 65 74 75 72 6e 20 65 2e 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 29 72 65 74 75 72 6e 20 65 2e 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 3b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 74 3d 30 2c 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e Data Ascii: ailHeight){var r=[window.screen.availHeight,window.screen.availWidth];return e.screen.detectScreenOrientation&&r.sort().reverse(),r}return e.NOT_AVAILABLE},u=function(e){if(null==navigator.plugins)return e.NOT_AVAILABLE;for(var r=[],t=0,n=navigator.plugin

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:19 UTC	641	OUT	GET /fonts/figtree-italic-latin.woff2 HTTP/1.1 Host: gain-app-prod.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://manage.gainapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://gain-app-prod.s3.amazonaws.com/multipage.68d4f9c1c2978cd78694.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:41:19 UTC	602	IN	HTTP/1.1 200 OK x-amz-id-2: ZFpnEWDBOvbOG3gVaMOxLmY+zj//vvz0JVQU2VtHWf+Gf9QxR09OLQhooj0B/6G6AuYtk9+UwalB1kv39iFoxQ== x-amz-request-id: QS03NZSVH8BQ92MZ Date: Thu, 03 Oct 2024 19:41:20 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Wed, 02 Oct 2024 23:16:38 GMT ETag: "951533806b4bb52f519681c078dae862" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: font/woff2 Server: AmazonS3 Content-Length: 20236 Connection: close
2024-10-03 19:41:19 UTC	8307	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4f 0c 00 13 00 00 00 00 9b 24 00 00 4e 9c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 46 1b 9c 00 1c 86 6c 3f 48 56 41 52 84 48 06 60 3f 53 54 41 54 81 18 27 2a 00 84 66 2f 5c 11 08 0a 81 82 58 e6 1c 0b 84 18 00 30 e2 28 01 36 02 24 03 88 2c 04 20 05 87 44 07 88 77 1b 8a 89 35 aa 5b b3 83 a0 db 01 38 f9 76 2d 7c 24 42 d8 38 36 cc 84 4f 8d 0c 04 1b 07 00 89 fe 95 d9 ff ff 3d 39 91 a1 84 5d 02 69 55 37 0f a1 21 cb 90 55 62 34 51 31 94 ee e2 59 ed aa 19 25 25 d9 e3 8c d9 b9 78 70 5d 3b c2 a0 37 69 b4 71 35 5c ee 13 2d 89 ed 46 56 51 f6 43 17 7c ee 07 89 a8 44 7d 80 66 42 ca 97 a8 dc e2 bf 22 be ab 88 8a fe ea ae 82 d8 03 31 41 b4 45 5a bc 7f cd 5c ef 81 8b a9 f3 42 30 6d 95 57 83 af d0 d6 2b 41 Data Ascii: wOF2O$NFl?HVARH`?STAT'*f/\X0(6$, Dw5[8v-\|$B86O=9]iU7!Ub4Q1Y%%xp];7iq5\-FVQC\|D}fB"1AEZ\B0mW+A
2024-10-03 19:41:19 UTC	9000	IN	Data Raw: 99 25 87 dc db d7 c2 69 3b bd 7b d0 43 99 c6 dc 21 f6 a7 f4 76 80 fb 74 95 aa 71 07 e1 68 56 73 a6 09 3d ec da be 0d 4e e3 40 9e dd af 56 99 06 a6 31 6a 43 05 f1 8f eb 9b b3 cc ab 22 1f c0 f9 0d ad ed 2b ca 3c d9 b6 0d f9 c8 3e 38 6b eb 03 f0 47 8b 46 73 7a 37 b5 9a 88 15 08 5c 9c a5 c2 a2 59 2d a0 bd f2 c8 ae a6 e0 3e a6 55 5d 17 29 f7 66 59 1d 8b 47 73 6d 2d e6 82 60 a4 38 53 8d 91 64 b5 82 36 f9 7e 44 4f 46 ef f8 64 52 b6 b4 11 2f 4b 82 5c 51 e9 c7 16 ef 3f d2 c3 d2 f5 97 76 e0 83 54 21 93 6b 1e bb ad 49 2c f9 f6 f0 6d c5 58 03 b7 89 b1 00 67 4b 9e 7c 7f 17 41 f0 eb d2 8f 05 a4 8f c1 83 77 fd 47 c4 81 91 ea f3 78 3f de eb 3c b3 73 f8 5e c4 e7 dc 25 b2 af 2d 3f 87 f7 7d 9a db cf bb 6f 87 bf a3 e5 50 d3 68 c4 b8 2f ab 35 b7 0f bd ff a8 3f 4e f2 2c d3 46 Data Ascii: %i;{C!vtqhVs=N@V1jC"+<>8kGFsz7\Y->U])fYGsm-`8Sd6~DOFdR/K\Q?vT!kI,mXgK\|AwGx?<s^%-?}oPh/5?N,F
2024-10-03 19:41:19 UTC	2929	IN	Data Raw: c0 0f 33 11 f9 85 1c 2a cf 12 58 cd 1d f5 24 59 16 a1 94 b5 f1 70 e4 06 4e 11 f4 58 41 14 9e 9d 26 99 06 26 93 98 2d 24 4e 3d 62 11 1b 27 bc 0e fd 70 7d 43 82 e3 66 69 6a e5 ab 16 6b 6b 19 b9 5f 0b a6 ff e8 0c 90 14 e1 cb b1 c4 c4 a6 dc 47 02 fb df 06 40 fa 23 11 2a 0d 32 97 3a 66 97 c1 a9 96 cd 6a cd 2e bf 57 ad 54 7a 2c a1 66 8a d9 e9 35 02 27 5a e6 f3 e9 58 0c ad 0b 96 30 3a 46 f3 fd b4 2f a0 51 cd 5f a6 6b fa 2f f1 1c bc 8b 1b a6 88 5c 09 a2 39 a7 75 0c cb ad 41 eb 8f a8 31 e3 9e ba 11 b9 a5 f9 87 86 c7 97 43 56 19 08 e1 a8 61 5c 54 47 cc 1e 9f ee 8b 75 87 ad c2 88 4f a7 e4 33 12 65 33 75 cd 92 92 53 c7 9e cd e9 db ef 62 e6 b1 3d ce cf 3f 7c fa 30 d8 40 f0 83 40 a1 c6 75 f1 6a a5 86 99 88 cf 04 76 f5 18 b9 02 2a cb c4 48 7e cf 5b 97 c7 e0 af c8 4f 19 Data Ascii: 3X$YpNXA&&-$N=b'p}Cfijkk_G@#2:fj.WTz,f5'ZX0:F/Q_k/\9uA1CVa\TGuO3e3uSb=?\|0@@ujv*H~[O

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:41:19 UTC	570	OUT	GET /app/1a2185480a68058fba80?protocol=7&client=js&version=4.4.0&flash=false HTTP/1.1 Host: ws-us2.pusher.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://manage.gainapp.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: G+MrXSTH4R11BMOXaaOubw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-03 19:41:19 UTC	128	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 03 Oct 2024 19:41:19 GMT Content-Length: 0 Connection: close Upgrade: websocket