Edit tour

Windows Analysis Report
https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present#card-wdvd2twm5f65uwl

Overview

General Information

Sample URL:	https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present#card-wdvd2twm5f65uwl
Analysis ID:	1632233
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

Phishing site or detected (based on various text indicators)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2080,i,12405311324763397468,14648066687106280237,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present#card-wdvd2twm5f65uwl" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /api/5776661/envelope/?sentry_key=824b9acd00f449f283554475ff8303bb&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.8.0 HTTP/1.1Host: o698378.ingest.sentry.ioConnection: keep-aliveContent-Length: 490sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://gamma.appSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gamma.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.35
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.35
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.35
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.35
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.35
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aa1selfstorage.com
Source: global traffic	DNS traffic detected: DNS query: gamma.app
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: cdn.iframe.ly
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: o698378.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: events.api.gamma.app
Source: global traffic	DNS traffic detected: DNS query: app.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: cdn.gamma.app
Source: global traffic	DNS traffic detected: DNS query: api.gamma.app
Source: global traffic	DNS traffic detected: DNS query: a187838077.cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: clientstream.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: imgproxy.gamma.app
Source: global traffic	DNS traffic detected: DNS query: assets.churnkey.co
Source: global traffic	DNS traffic detected: DNS query: events.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic	DNS traffic detected: DNS query: canny.io
Source: global traffic	DNS traffic detected: DNS query: test.geckoway.de
Source: global traffic	DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: api-iam.intercom.io
Source: global traffic	DNS traffic detected: DNS query: nexus-websocket-a.intercom.io

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 07 Mar 2025 19:11:58 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 07 Mar 2025 19:12:03 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 19:12:04 GMTContent-Type: application/json; charset=utf-8Content-Length: 78Connection: closeX-Powered-By: ExpressVary: OriginAccess-Control-Allow-Credentials: trueETag: W/"4e-zsIbJVw6xrpzOUC/ZlEdZPzWsAE"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 19:12:04 GMTContent-Type: application/json; charset=utf-8Content-Length: 67Connection: closeX-Powered-By: ExpressVary: OriginAccess-Control-Allow-Credentials: trueETag: W/"43-VS8Zk4sa6WhQp4atvaFlfxregaw"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 07 Mar 2025 19:12:05 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 19:12:07 GMTContent-Type: application/json; charset=utf-8Content-Length: 67Connection: closeX-Powered-By: ExpressVary: OriginAccess-Control-Allow-Credentials: trueETag: W/"43-tRn5gtlf1DvZQJH7tcLHAe4uZTY"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 07 Mar 2025 19:12:10 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 07 Mar 2025 19:12:13 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 07 Mar 2025 19:12:16 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 07 Mar 2025 19:12:18 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 19:12:27 GMTContent-Type: application/json; charset=utf-8Content-Length: 67Connection: closeX-Powered-By: ExpressVary: OriginAccess-Control-Allow-Credentials: trueETag: W/"43-tRn5gtlf1DvZQJH7tcLHAe4uZTY"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 19:12:55 GMTContent-Type: application/json; charset=utf-8Content-Length: 67Connection: closeX-Powered-By: ExpressVary: OriginAccess-Control-Allow-Credentials: trueETag: W/"43-tRn5gtlf1DvZQJH7tcLHAe4uZTY"

Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001007d
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001007f
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010080
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010081
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b03d
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b046
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b056
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b05a
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b3cf
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b3d4
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b3d6
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b3d8
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b3d9
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b3da
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b3db
Source: chromecache_240.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735b3dc
Source: chromecache_252.4.dr	String found in binary or memory: https://app.optimizely.com/js/innie.js
Source: chromecache_252.4.dr	String found in binary or memory: https://cdn-assets-prod.s3.amazonaws.com/js/preview2/20579410255.js
Source: chromecache_224.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_224.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_224.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_224.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_224.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_224.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_224.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_240.4.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=tiw2cwq&ht=tk&f=10870.10872.10873.10874.28201.28205.28208.28222.28
Source: chromecache_247.4.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/0082da/00000000000000000001007f/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/0082da/00000000000000000001007f/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/0082da/00000000000000000001007f/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/00dec1/00000000000000007735b3d4/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/00dec1/00000000000000007735b3d4/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/00dec1/00000000000000007735b3d4/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/1b97fb/00000000000000007735b3d8/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/1b97fb/00000000000000007735b3d8/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/1b97fb/00000000000000007735b3d8/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/2ea16c/00000000000000007735b3da/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/2ea16c/00000000000000007735b3da/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/2ea16c/00000000000000007735b3da/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/414b67/00000000000000007735b046/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/414b67/00000000000000007735b046/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/414b67/00000000000000007735b046/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/41c432/00000000000000007735b3d9/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/41c432/00000000000000007735b3d9/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/41c432/00000000000000007735b3d9/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/4e9399/000000000000000000010081/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/4e9399/000000000000000000010081/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/4e9399/000000000000000000010081/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/713d1f/00000000000000007735b3cf/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/713d1f/00000000000000007735b3cf/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/713d1f/00000000000000007735b3cf/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/807888/00000000000000000001007d/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/807888/00000000000000000001007d/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/807888/00000000000000000001007d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/867dff/00000000000000007735b03d/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/867dff/00000000000000007735b03d/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/867dff/00000000000000007735b03d/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/880b37/00000000000000007735b3db/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/880b37/00000000000000007735b3db/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/880b37/00000000000000007735b3db/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/a8369e/00000000000000007735b05a/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/a8369e/00000000000000007735b05a/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/a8369e/00000000000000007735b05a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/b6ae0d/00000000000000007735b3dc/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/b6ae0d/00000000000000007735b3dc/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/b6ae0d/00000000000000007735b3dc/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/bb4545/00000000000000007735b056/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/bb4545/00000000000000007735b056/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/bb4545/00000000000000007735b056/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/c88cc7/00000000000000007735b3d6/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/c88cc7/00000000000000007735b3d6/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/c88cc7/00000000000000007735b3d6/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/d99a65/000000000000000000010080/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/d99a65/000000000000000000010080/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_240.4.dr	String found in binary or memory: https://use.typekit.net/af/d99a65/000000000000000000010080/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49680
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49678
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49677
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49676
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49671
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2080,i,12405311324763397468,14648066687106280237,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present#card-wdvd2twm5f65uwl"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2080,i,12405311324763397468,14648066687106280237,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present	0%	Avira URL Cloud	safe
https://cdn-assets-prod.s3.amazonaws.com/js/preview2/20579410255.js	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
static.cloudflareinsights.com	104.16.80.73	true	false	high
events.launchdarkly.com	35.171.73.226	true	false	high
a1874.dscg1.akamai.net	2.16.100.91	true	false	high
assets.churnkey.co	172.67.71.250	true	false	high
cdn.gamma.app	104.18.11.200	true	false	high
canny.io	18.66.147.116	true	false	high
gamma.app	104.18.11.200	true	false	high
www.google.com	172.217.16.196	true	false	high
nexus-websocket-a.intercom.io	35.174.127.31	true	false	high
aa1selfstorage.com	173.249.144.177	true	false	unknown
cdn.iframe.ly	108.138.7.69	true	false	high
c3.shared.global.fastly.net	151.101.130.217	true	false	high
js.intercomcdn.com	18.245.46.19	true	false	high
logx.optimizely.com	34.49.241.189	true	false	high
event-tracking-prod-1378027167.us-east-2.elb.amazonaws.com	3.138.64.170	true	false	high
widget.intercom.io	143.204.98.100	true	false	high
clientstream-ga.launchdarkly.com	76.223.31.44	true	false	high
o698378.ingest.sentry.io	34.120.195.249	true	false	high
api.gamma.app	104.18.11.200	true	false	high
api-iam.intercom.io	52.72.28.68	true	false	high
cdn.optimizely.com	104.18.65.57	true	false	high
test.geckoway.de	104.21.48.1	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	high
a187838077.cdn.optimizely.com	104.18.65.57	true	false	high
imgproxy.gamma.app	104.18.10.200	true	false	high
a1988.dscg1.akamai.net	2.16.100.96	true	false	high
use.typekit.net	unknown	unknown	false	high
clientstream.launchdarkly.com	unknown	unknown	false	high
app.launchdarkly.com	unknown	unknown	false	high
events.api.gamma.app	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present#card-wdvd2twm5f65uwl	false		high
https://api-iam.intercom.io/messenger/web/launcher_settings	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91cc67b9ff581f14&lang=auto	false		high
https://events.api.gamma.app/v1/i	false		high
https://clientstream.launchdarkly.com/eval/61e83cfd8ac5a016e6f0d0b6/eyJraW5kIjoibXVsdGkiLCJ1c2VyIjp7ImtleSI6ImxkX2Fub255bW91c191c2VyIiwiYW5vbnltb3VzIjp0cnVlLCJpc0dhbW1hRTJFIjpmYWxzZSwiaXNHYW1tYVVzZXIiOmZhbHNlLCJvcmdJZCI6Im5vX29yZ19pZCIsImlzTW9iaWxlRGV2aWNlIjpmYWxzZSwiZGVwbG95VGltZSI6MTc0MTI5MzExOTg4OCwiZGVwbG95bWVudEhhc2giOiIxdjl4Y3JuMjIifX0?withReasons=true	false		high
https://events.api.gamma.app/v1/t	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://test.geckoway.de/	false		unknown
https://app.launchdarkly.com/sdk/evalx/61e83cfd8ac5a016e6f0d0b6/contexts/eyJraW5kIjoibXVsdGkiLCJ1c2VyIjp7ImtleSI6ImxkX2Fub255bW91c191c2VyIiwiYW5vbnltb3VzIjp0cnVlLCJpc0dhbW1hRTJFIjpmYWxzZSwiaXNHYW1tYVVzZXIiOmZhbHNlLCJvcmdJZCI6Im5vX29yZ19pZCIsImlzTW9iaWxlRGV2aWNlIjpmYWxzZSwiZGVwbG95VGltZSI6MTc0MTI5MzExOTg4OCwiZGVwbG95bWVudEhhc2giOiIxdjl4Y3JuMjIifSwid29ya3NwYWNlIjp7ImtleSI6ImFybGI5OXJtZGliNnoydiIsIm5hbWUiOiJEYXJyZWxsIEdhcnRuZXIncyBXb3Jrc3BhY2UiLCJwbGFuIjoicHJvIn19?withReasons=true	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/91cc67b9ff581f14/1741374760481/4d8e74c56c6feff9fed0f2f22b39a955ef904ae4dc27314a3bc76c16dc0c5060/0NpxE-M6uffnNO1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/695961111:1741371235:VTCarm8RaiNogow6cVIHS60ZTttenHcp1EPHomVDgDA/91cc67b9ff581f14/lwtO_TFD7efBzU8M2UMBjb135EDI26mhLkbYhKBLCFA-1741374754-1.1.1.1-nke2g7BRzWCxdk8G_vkV2lwtTona8oGLbyB8cvmaCzINyvKqZdSVw8gc2yQMVmPf	false		high
https://p.typekit.net/p.css?s=1&k=tiw2cwq&ht=tk&f=10870.10872.10873.10874.28201.28205.28208.28222.28225.28226.28227.28238.32157.32159.32163.32164&a=2326044&app=typekit&e=css	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://clientstream.launchdarkly.com/eval/61e83cfd8ac5a016e6f0d0b6/eyJraW5kIjoibXVsdGkiLCJ1c2VyIjp7ImtleSI6ImxkX2Fub255bW91c191c2VyIiwiYW5vbnltb3VzIjp0cnVlLCJpc0dhbW1hRTJFIjpmYWxzZSwiaXNHYW1tYVVzZXIiOmZhbHNlLCJvcmdJZCI6Im5vX29yZ19pZCIsImlzTW9iaWxlRGV2aWNlIjpmYWxzZSwiZGVwbG95VGltZSI6MTc0MTI5MzExOTg4OCwiZGVwbG95bWVudEhhc2giOiIxdjl4Y3JuMjIifSwid29ya3NwYWNlIjp7ImtleSI6ImFybGI5OXJtZGliNnoydiIsIm5hbWUiOiJEYXJyZWxsIEdhcnRuZXIncyBXb3Jrc3BhY2UiLCJwbGFuIjoicHJvIn19?withReasons=true	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/91cc67b9ff581f14/1741374760479/csr2BsdXJgh2nND	false		high
https://app.launchdarkly.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?withReasons=true	false		high
https://cdn.optimizely.com/js/20579410255.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://api-iam.intercom.io/messenger/web/ping	false		high
https://nexus-websocket-a.intercom.io/pubsub/5-AmFUyWRjBRGQiDOjsGLamJaTe9SScnv0txulk_yb6Qs0qOm-In5DmOrHZCpaQN8cXEVa7C-_fs3g0qzJlWuvJxwdhTufHugvd7T1?X-Nexus-New-Client=true&X-Nexus-Version=0.14.0&user_role=visitor	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/cmfyz/0x4AAAAAAA_1kDLYPl1nWFxU/auto/fbE/new/normal/auto/	false		high
https://events.launchdarkly.com/events/diagnostic/61e83cfd8ac5a016e6f0d0b6	false		high
https://logx.optimizely.com/v1/events	false		high
https://app.launchdarkly.com/sdk/evalx/61e83cfd8ac5a016e6f0d0b6/contexts/eyJraW5kIjoibXVsdGkiLCJ1c2VyIjp7ImtleSI6ImxkX2Fub255bW91c191c2VyIiwiYW5vbnltb3VzIjp0cnVlLCJpc0dhbW1hRTJFIjpmYWxzZSwiaXNHYW1tYVVzZXIiOmZhbHNlLCJvcmdJZCI6Im5vX29yZ19pZCIsImlzTW9iaWxlRGV2aWNlIjpmYWxzZSwiZGVwbG95VGltZSI6MTc0MTI5MzExOTg4OCwiZGVwbG95bWVudEhhc2giOiIxdjl4Y3JuMjIifX0?withReasons=true	false		high
https://events.api.gamma.app/v1/user-context	false		high
https://o698378.ingest.sentry.io/api/5776661/envelope/?sentry_key=824b9acd00f449f283554475ff8303bb&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.8.0	false		high
https://events.launchdarkly.com/events/bulk/61e83cfd8ac5a016e6f0d0b6	false		high
https://use.typekit.net/tiw2cwq.css	false		high
https://a187838077.cdn.optimizely.com/client_storage/a187838077.html	false		high
https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present	false	Avira URL Cloud: safe	unknown
https://app.launchdarkly.com/sdk/goals/61e83cfd8ac5a016e6f0d0b6	false		high
https://a187838077.cdn.optimizely.com/cdn-cgi/rum?	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
35.171.73.226	events.launchdarkly.com	United States	14618	AMAZON-AESUS	false
18.66.147.116	canny.io	United States	3	MIT-GATEWAYSUS	false
104.21.48.1	test.geckoway.de	United States	13335	CLOUDFLARENETUS	false
173.249.144.177	aa1selfstorage.com	United States	40819	VPSDATACENTERUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.71.250	assets.churnkey.co	United States	13335	CLOUDFLARENETUS	false
104.18.10.200	imgproxy.gamma.app	United States	13335	CLOUDFLARENETUS	false
2.16.100.96	a1988.dscg1.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
151.101.130.217	c3.shared.global.fastly.net	United States	54113	FASTLYUS	false
35.174.127.31	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
2.16.100.91	a1874.dscg1.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
104.21.112.1	unknown	United States	13335	CLOUDFLARENETUS	false
34.49.241.189	logx.optimizely.com	United States	2686	ATGS-MMD-ASUS	false
34.238.5.73	unknown	United States	14618	AMAZON-AESUS	false
143.204.98.100	widget.intercom.io	United States	16509	AMAZON-02US	false
108.138.7.69	cdn.iframe.ly	United States	16509	AMAZON-02US	false
104.18.65.57	cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
52.14.205.96	unknown	United States	16509	AMAZON-02US	false
18.245.46.19	js.intercomcdn.com	United States	16509	AMAZON-02US	false
52.72.28.68	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
3.138.64.170	event-tracking-prod-1378027167.us-east-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
76.223.31.44	clientstream-ga.launchdarkly.com	United States	16509	AMAZON-02US	false
104.18.11.200	cdn.gamma.app	United States	13335	CLOUDFLARENETUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
34.120.195.249	o698378.ingest.sentry.io	United States	15169	GOOGLEUS	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1632233
Start date and time:	2025-03-07 20:10:30 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present#card-wdvd2twm5f65uwl
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@28/221@76/28
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 23284
Category:	downloaded
Size (bytes):	8065
Entropy (8bit):	7.972967882532169
Encrypted:	false
SSDEEP:	192:uvWyH5JdVaNKb/IUrshBHV7TBaJeD1XLIVU:uvZH7ONLUrsx7Nb1XkVU
MD5:	25AB8FF0742CD183FFFEF8B715159B4C
SHA1:	D057633202E47E281EAB5B714CBD51DAC50DB3A6
SHA-256:	FCCB8DF76085DFA64A5CA4B91CA9CD4E1107FF182F65D8D37456E1F825D47BEE
SHA-512:	7068076119DA356F685F77CDC9603E9926AEF4FA63AEF9E7264E76930ACF17F3AB6ECC3D541521A169D4677E010BC11E884E9ECAC8133641E2DAE1DCA3AF8767
Malicious:	false
Reputation:	low
URL:	https://gamma.app/_next/static/chunks/9863-ade48cd7b18f58cb.js?dpl=dpl_AmRPMj9KKeW4g92pz9v8ABm9EUsU
Preview:	...........<kw.6....].L!........4.'.>.=..I.(R%)K...~g. .J.....<l.......P[..'.7L..=...\....N/&.`....\.KK.....s..'..]..n.M...l....F..Mh.z.6.....g.<zH..==8[...I..k^\..U...a.x.XcI_.s..eU'.z3g..Ye.$....s.YWLz.x..Hc~_...8..X.N.Y..ct..wYrC......!`..D.Q....z..4B.^o5.....n..6X...N.f0...V...sq..A...8n..5.K.V.N.Vc246..Q8....G....:.:.<..E.^.~..-.C.D.0.\|p\o..a...Q..j.=..T..$.}.g(U..Jz5...a....Y...>....o...$b.0.yc;d...n..P.-....f........b.v>4..`.............(..Z...M..c.....n..O.^.6;-6.....]h.....{...2B.&p5.....b.z_8.....2..C..{6.....j....[..~...x&...=.j.fk..T.:.>g..i..5.Gl..2Oq.frLQ....\|.,.D.g.>....hz..zn..8.%.....)`.3C..0.oA.C.......D......`....p.w#..-.V^. W.O.Q.....f...5...'L+..1..!.j.R..-5rD...Z...Z..E......`.$.t..w....]..\.=7.@7......h%........'.^..Y.`.T..........B..J.+]....wk..7.uu..#n..C/.5V....p..\|^.....i..N..E^2.).D...-(.N..j....R...T...S[.$....h..'.OZ...)..:.@L4O.nQ5..c$5...fa3..._..O.t.SH.....V........`.j.....lm..<).V.g.....^.....9

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 37393
Category:	downloaded
Size (bytes):	11670
Entropy (8bit):	7.981893521772782
Encrypted:	false
SSDEEP:	192:N1k7EnV2MXTUg0aVFV+NAeZmnc06U7Y441pYFGoZLZFIHkwWxLiFeDAM5y0p6SJc:wubXTUg0CVFeZ4cLIY11OF7LrIEhYe8l
MD5:	B31A28C6A9636A4244E8337D99ABF4FB
SHA1:	1AE8DAAC21338A13457FBA96DFD033B574D02C9A
SHA-256:	FB5256667CFFEF527FE593D2635951A297A02B4CED5B77086571576440DA3DB4
SHA-512:	1E2E2BDFAB6AB5E88E075549B7B880E3FCF56D4AF4D89FFEF21758AB2C34C34A98941BFCFD68EAE20C84A85BC7C029F3AF18771F01CD473FB8E42EB6468E75B1
Malicious:	false
Reputation:	low
URL:	https://gamma.app/_next/static/chunks/6852-30334c7472d0b470.js?dpl=dpl_AmRPMj9KKeW4g92pz9v8ABm9EUsU
Preview:	...........}iS......+.o..T.u0....2.9!.f..$9s(jJX.VFV;..!F..>K..Zl`r.J...^.}...<..4K.q..:..n.{y=.._.'...._NF.w../.\o6O'.......X.....8Rd"vG....8.X$..~.swx.'.5.......+......r...{....H.r.ow.^..W..;...r.......v.v.]1....n...#?M;.E..Y8..qp.'........".u...2.R/..m6y...~....6.^n].....e.0....5{'.d...t.#G..7.[..h4..ax.)7.$.s.$q..~......W;.a6.@.]o..9..........s.j<O./...fu...,..!.w.9.....+b.x..........(....Y..E.g...".....,.U.....;u.k..K...+&..W.i..h......&Q..Ldj0...Oz..{...Q..{..:.....`5...q.Tfg2..v.^e2...H.]...za..$;Vq.....".o"9.N.4.x.xpf....!N....x.M..w+.s..S@...^ ]..5Zq.E,...........V....:.v<O.......h..4F=G.z.H...#....{..L....$z..p?D3]..p..6.4m....o.RBT....Z..0..8S........4.(".... .... \...6e...$.t..O...-\.(...?...Z.7.~..~..]d.(....^..W..&2U......r.M\o....e.....z,..p......}.7...,I.0..DY%...7w+S;.l.........18..+..'.......Y.D....TW885B.g.._gm.....WLm.............P...'.8..V............n.:.t.o.......W...N ..^.....{.....x.E. .D.."...ZJ........\|9.=[

Name	Source	Malicious	Antivirus Detection	Reputation
https://use.typekit.net/af/c88cc7/00000000000000007735b3d6/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/b6ae0d/00000000000000007735b3dc/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/d99a65/000000000000000000010080/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/4e9399/000000000000000000010081/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://app.optimizely.com/js/innie.js	chromecache_252.4.dr	false		high
https://use.typekit.net/af/00dec1/00000000000000007735b3d4/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/4e9399/000000000000000000010081/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/c88cc7/00000000000000007735b3d6/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/d99a65/000000000000000000010080/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/1b97fb/00000000000000007735b3d8/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/1b97fb/00000000000000007735b3d8/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/880b37/00000000000000007735b3db/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/d99a65/000000000000000000010080/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/867dff/00000000000000007735b03d/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/c88cc7/00000000000000007735b3d6/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/41c432/00000000000000007735b3d9/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/0082da/00000000000000000001007f/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/414b67/00000000000000007735b046/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/00dec1/00000000000000007735b3d4/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/1b97fb/00000000000000007735b3d8/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/b6ae0d/00000000000000007735b3dc/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/2ea16c/00000000000000007735b3da/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://p.typekit.net/p.css?s=1&k=tiw2cwq&ht=tk&f=10870.10872.10873.10874.28201.28205.28208.28222.28	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b3d4	chromecache_240.4.dr	false		high
https://use.typekit.net/af/713d1f/00000000000000007735b3cf/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/807888/00000000000000000001007d/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b03d	chromecache_240.4.dr	false		high
https://use.typekit.net/af/867dff/00000000000000007735b03d/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b3d8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b3d9	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b3d6	chromecache_240.4.dr	false		high
https://use.typekit.net/af/bb4545/00000000000000007735b056/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b046	chromecache_240.4.dr	false		high
https://use.typekit.net/af/880b37/00000000000000007735b3db/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/000000000000000000010081	chromecache_240.4.dr	false		high
http://typekit.com/eulas/000000000000000000010080	chromecache_240.4.dr	false		high
https://use.typekit.net/af/0082da/00000000000000000001007f/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/a8369e/00000000000000007735b05a/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/4e9399/000000000000000000010081/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/713d1f/00000000000000007735b3cf/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/807888/00000000000000000001007d/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/867dff/00000000000000007735b03d/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/a8369e/00000000000000007735b05a/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b056	chromecache_240.4.dr	false		high
https://use.typekit.net/af/0082da/00000000000000000001007f/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/414b67/00000000000000007735b046/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/41c432/00000000000000007735b3d9/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/bb4545/00000000000000007735b056/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/a8369e/00000000000000007735b05a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/880b37/00000000000000007735b3db/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b3cf	chromecache_240.4.dr	false		high
https://use.typekit.net/af/2ea16c/00000000000000007735b3da/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://cdn-assets-prod.s3.amazonaws.com/js/preview2/20579410255.js	chromecache_252.4.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/00000000000000007735b3db	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b3dc	chromecache_240.4.dr	false		high
https://use.typekit.net/af/414b67/00000000000000007735b046/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b3da	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000007735b05a	chromecache_240.4.dr	false		high
https://use.typekit.net/af/bb4545/00000000000000007735b056/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/807888/00000000000000000001007d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/713d1f/00000000000000007735b3cf/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/b6ae0d/00000000000000007735b3dc/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/41c432/00000000000000007735b3d9/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
https://use.typekit.net/af/2ea16c/00000000000000007735b3da/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000000001007d	chromecache_240.4.dr	false		high
https://use.typekit.net/af/00dec1/00000000000000007735b3d4/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_240.4.dr	false		high
http://typekit.com/eulas/00000000000000000001007f	chromecache_240.4.dr	false		high

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 7, 2025 20:11:37.116219044 CET	192.168.2.6	1.1.1.1	0x5153	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:37.116579056 CET	192.168.2.6	1.1.1.1	0x4ae1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 7, 2025 20:11:38.029261112 CET	192.168.2.6	1.1.1.1	0xbd44	Standard query (0)	aa1selfstorage.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:38.030721903 CET	192.168.2.6	1.1.1.1	0x43ae	Standard query (0)	aa1selfstorage.com	65	IN (0x0001)	false
Mar 7, 2025 20:11:41.325784922 CET	192.168.2.6	1.1.1.1	0x70c3	Standard query (0)	gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:41.325918913 CET	192.168.2.6	1.1.1.1	0xd6c6	Standard query (0)	gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:11:46.089067936 CET	192.168.2.6	1.1.1.1	0x7841	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:46.089569092 CET	192.168.2.6	1.1.1.1	0x29d0	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Mar 7, 2025 20:11:46.679778099 CET	192.168.2.6	1.1.1.1	0xc787	Standard query (0)	cdn.iframe.ly	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:46.679966927 CET	192.168.2.6	1.1.1.1	0x5eee	Standard query (0)	cdn.iframe.ly	65	IN (0x0001)	false
Mar 7, 2025 20:11:49.096092939 CET	192.168.2.6	1.1.1.1	0xfa8a	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:49.096157074 CET	192.168.2.6	1.1.1.1	0xd584	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Mar 7, 2025 20:11:52.080420017 CET	192.168.2.6	1.1.1.1	0x57b	Standard query (0)	o698378.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:52.080600977 CET	192.168.2.6	1.1.1.1	0x2986	Standard query (0)	o698378.ingest.sentry.io	65	IN (0x0001)	false
Mar 7, 2025 20:11:55.703898907 CET	192.168.2.6	1.1.1.1	0xe065	Standard query (0)	o698378.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:55.704380989 CET	192.168.2.6	1.1.1.1	0x199f	Standard query (0)	o698378.ingest.sentry.io	65	IN (0x0001)	false
Mar 7, 2025 20:11:57.891954899 CET	192.168.2.6	1.1.1.1	0xb807	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:57.892226934 CET	192.168.2.6	1.1.1.1	0x8bdb	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Mar 7, 2025 20:11:57.931480885 CET	192.168.2.6	1.1.1.1	0xbe01	Standard query (0)	events.api.gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:57.931602001 CET	192.168.2.6	1.1.1.1	0x5081	Standard query (0)	events.api.gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:11:57.936599970 CET	192.168.2.6	1.1.1.1	0xe520	Standard query (0)	app.launchdarkly.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:57.936892986 CET	192.168.2.6	1.1.1.1	0xede7	Standard query (0)	app.launchdarkly.com	65	IN (0x0001)	false
Mar 7, 2025 20:11:57.973359108 CET	192.168.2.6	1.1.1.1	0x58af	Standard query (0)	cdn.gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:57.973731041 CET	192.168.2.6	1.1.1.1	0x8519	Standard query (0)	cdn.gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:11:58.093013048 CET	192.168.2.6	1.1.1.1	0x9ef8	Standard query (0)	api.gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:11:58.093219042 CET	192.168.2.6	1.1.1.1	0x36cf	Standard query (0)	api.gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:12:01.086698055 CET	192.168.2.6	1.1.1.1	0xb571	Standard query (0)	a187838077.cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:01.086916924 CET	192.168.2.6	1.1.1.1	0x8a60	Standard query (0)	a187838077.cdn.optimizely.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:01.121634960 CET	192.168.2.6	1.1.1.1	0xdb35	Standard query (0)	events.api.gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:01.121773005 CET	192.168.2.6	1.1.1.1	0x407c	Standard query (0)	events.api.gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:12:02.075505972 CET	192.168.2.6	1.1.1.1	0x5aac	Standard query (0)	logx.optimizely.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:02.075689077 CET	192.168.2.6	1.1.1.1	0xeb28	Standard query (0)	logx.optimizely.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:03.754987955 CET	192.168.2.6	1.1.1.1	0xf2f5	Standard query (0)	cdn.gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:03.755146027 CET	192.168.2.6	1.1.1.1	0xe7b9	Standard query (0)	cdn.gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:12:04.083451033 CET	192.168.2.6	1.1.1.1	0x10e1	Standard query (0)	app.launchdarkly.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:04.083607912 CET	192.168.2.6	1.1.1.1	0x4635	Standard query (0)	app.launchdarkly.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:04.236927986 CET	192.168.2.6	1.1.1.1	0x705f	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:04.237049103 CET	192.168.2.6	1.1.1.1	0x8eea	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:04.431154966 CET	192.168.2.6	1.1.1.1	0x98bd	Standard query (0)	api.gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:04.431299925 CET	192.168.2.6	1.1.1.1	0x35f4	Standard query (0)	api.gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:12:04.475517035 CET	192.168.2.6	1.1.1.1	0x2981	Standard query (0)	clientstream.launchdarkly.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:04.475764990 CET	192.168.2.6	1.1.1.1	0x66fc	Standard query (0)	clientstream.launchdarkly.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:05.434896946 CET	192.168.2.6	1.1.1.1	0xe229	Standard query (0)	imgproxy.gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:05.435007095 CET	192.168.2.6	1.1.1.1	0x1c52	Standard query (0)	imgproxy.gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:12:06.050334930 CET	192.168.2.6	1.1.1.1	0x69f6	Standard query (0)	imgproxy.gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:06.050502062 CET	192.168.2.6	1.1.1.1	0x1c24	Standard query (0)	imgproxy.gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:12:08.483602047 CET	192.168.2.6	1.1.1.1	0x256b	Standard query (0)	assets.churnkey.co	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:08.483880043 CET	192.168.2.6	1.1.1.1	0x1ee6	Standard query (0)	assets.churnkey.co	65	IN (0x0001)	false
Mar 7, 2025 20:12:14.355238914 CET	192.168.2.6	1.1.1.1	0x70fb	Standard query (0)	events.launchdarkly.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:14.355431080 CET	192.168.2.6	1.1.1.1	0x24f9	Standard query (0)	events.launchdarkly.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:14.358823061 CET	192.168.2.6	1.1.1.1	0x29c6	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:14.359093904 CET	192.168.2.6	1.1.1.1	0x925e	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Mar 7, 2025 20:12:14.360063076 CET	192.168.2.6	1.1.1.1	0xb274	Standard query (0)	canny.io	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:14.360332966 CET	192.168.2.6	1.1.1.1	0x5a3	Standard query (0)	canny.io	65	IN (0x0001)	false
Mar 7, 2025 20:12:14.844319105 CET	192.168.2.6	1.1.1.1	0x9ff9	Standard query (0)	gamma.app	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:14.844518900 CET	192.168.2.6	1.1.1.1	0x6ef8	Standard query (0)	gamma.app	65	IN (0x0001)	false
Mar 7, 2025 20:12:21.061383009 CET	192.168.2.6	1.1.1.1	0x36c0	Standard query (0)	test.geckoway.de	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:21.061558962 CET	192.168.2.6	1.1.1.1	0xd457	Standard query (0)	test.geckoway.de	65	IN (0x0001)	false
Mar 7, 2025 20:12:21.277051926 CET	192.168.2.6	1.1.1.1	0x673f	Standard query (0)	test.geckoway.de	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:21.277226925 CET	192.168.2.6	1.1.1.1	0x4080	Standard query (0)	test.geckoway.de	65	IN (0x0001)	false
Mar 7, 2025 20:12:22.945425987 CET	192.168.2.6	1.1.1.1	0x9b3f	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:22.945880890 CET	192.168.2.6	1.1.1.1	0x7432	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:27.251249075 CET	192.168.2.6	1.1.1.1	0xec7f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:27.251631021 CET	192.168.2.6	1.1.1.1	0x306d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:28.326445103 CET	192.168.2.6	1.1.1.1	0x8514	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:28.326617956 CET	192.168.2.6	1.1.1.1	0x2e76	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Mar 7, 2025 20:12:30.854602098 CET	192.168.2.6	1.1.1.1	0xd7fd	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:30.854748964 CET	192.168.2.6	1.1.1.1	0xba9	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Mar 7, 2025 20:12:31.085788965 CET	192.168.2.6	1.1.1.1	0x9e60	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:31.086240053 CET	192.168.2.6	1.1.1.1	0x9d5d	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false
Mar 7, 2025 20:12:32.680792093 CET	192.168.2.6	1.1.1.1	0x1e0a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:32.680985928 CET	192.168.2.6	1.1.1.1	0x330a	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:37.946882010 CET	192.168.2.6	1.1.1.1	0x9ada	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:37.947035074 CET	192.168.2.6	1.1.1.1	0x6c04	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 7, 2025 20:12:39.736078978 CET	192.168.2.6	1.1.1.1	0x3e9b	Standard query (0)	test.geckoway.de	A (IP address)	IN (0x0001)	false
Mar 7, 2025 20:12:39.736257076 CET	192.168.2.6	1.1.1.1	0xf870	Standard query (0)	test.geckoway.de	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Mar 7, 2025 20:12:08.393642902 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 7, 2025 20:12:09.024348974 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 07 Mar 2025 18:29:15 GMT Expires: Fri, 07 Mar 2025 19:19:15 GMT Age: 2573 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 7, 2025 20:12:09.030443907 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 7, 2025 20:12:09.213184118 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 07 Mar 2025 18:29:17 GMT Expires: Fri, 07 Mar 2025 19:19:17 GMT Age: 2572 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:11:40 UTC	762	OUT	GET /ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present HTTP/1.1 Host: aa1selfstorage.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:11:41 UTC	347	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 07 Mar 2025 19:11:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: wptouch-pro-view=mobile; expires=Wed, 06-Mar-2030 19:11:40 GMT; Max-Age=157680000 Location: //gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present X-Cache-NxAccel: BYPASS
2025-03-07 19:11:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:11:48 UTC	574	OUT	GET /tiw2cwq.css HTTP/1.1 Host: use.typekit.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:11:49 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: private, max-age=600, stale-while-revalidate=604800 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 07 Mar 2025 19:11:48 GMT Content-Length: 11831 Connection: close Akamai-GRN: 0.5c641002.1741374708.38c3f62
2025-03-07 19:11:49 UTC	11831	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 65 20 54 79 70 65 6b 69 74 20 73 65 72 76 69 63 65 20 75 73 65 64 20 74 6f 20 64 65 6c 69 76 65 72 20 74 68 69 73 20 66 6f 6e 74 20 6f 72 20 66 6f 6e 74 73 20 66 6f 72 20 75 73 65 20 6f 6e 20 77 65 62 73 69 74 65 73 0a 20 2a 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 41 64 6f 62 65 20 61 6e 64 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 73 65 20 54 65 72 6d 73 20 6f 66 20 55 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 65 75 6c 61 73 2f 74 6f 75 5f 74 79 70 65 6b 69 74 2e 20 46 6f 72 20 66 6f 6e 74 20 6c 69 63 65 6e 73 65 0a 20 2a 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 74 68 65 20 6c 69 73 74 20 62 65 6c 6f 77 2e 0a 20 2a 0a 20 2a 20 61 64 Data Ascii: /* * The Typekit service used to deliver this font or fonts for use on websites * is provided by Adobe and is subject to these Terms of Use * http://www.adobe.com/products/eulas/tou_typekit. For font license * information, see the list below. * * ad

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:11:51 UTC	718	OUT	GET /p.css?s=1&k=tiw2cwq&ht=tk&f=10870.10872.10873.10874.28201.28205.28208.28222.28225.28226.28227.28238.32157.32159.32163.32164&a=2326044&app=typekit&e=css HTTP/1.1 Host: p.typekit.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://use.typekit.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:11:52 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css Content-Length: 5 Last-Modified: Sun, 01 Dec 2024 12:44:58 GMT ETag: "674c5a4a-5" Cache-Control: public, max-age=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Fri, 07 Mar 2025 19:11:51 GMT Connection: close
2025-03-07 19:11:52 UTC	5	IN	Data Raw: 2f 2a 2a 2f 0a Data Ascii: /**/

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:11:54 UTC	738	OUT	POST /api/5776661/envelope/?sentry_key=824b9acd00f449f283554475ff8303bb&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.8.0 HTTP/1.1 Host: o698378.ingest.sentry.io Connection: keep-alive Content-Length: 490 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://gamma.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:11:54 UTC	490	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 35 2d 30 33 2d 30 37 54 31 39 3a 31 31 3a 35 31 2e 33 37 34 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 6e 65 78 74 6a 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 38 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 33 38 39 34 38 38 66 35 65 35 36 36 34 61 38 32 61 64 32 35 61 30 32 66 64 30 30 31 62 34 31 61 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 35 2d 30 33 2d 30 37 54 31 39 3a 31 31 3a 35 31 2e 33 37 34 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 33 2d 30 37 54 31 39 3a 31 31 3a 35 31 2e 33 37 34 5a 22 2c 22 73 74 61 74 75 73 Data Ascii: {"sent_at":"2025-03-07T19:11:51.374Z","sdk":{"name":"sentry.javascript.nextjs","version":"7.8.0"}}{"type":"session"}{"sid":"389488f5e5664a82ad25a02fd001b41a","init":true,"started":"2025-03-07T19:11:51.374Z","timestamp":"2025-03-07T19:11:51.374Z","status
2025-03-07 19:11:55 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 07 Mar 2025 19:11:55 GMT Content-Type: application/json Content-Length: 2 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-07 19:11:55 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:11:57 UTC	517	OUT	GET /api/5776661/envelope/?sentry_key=824b9acd00f449f283554475ff8303bb&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.8.0 HTTP/1.1 Host: o698378.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:11:58 UTC	290	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Fri, 07 Mar 2025 19:11:58 GMT Content-Type: text/html Content-Length: 548 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-07 19:11:58 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:00 UTC	569	OUT	GET /js/20579410255.js HTTP/1.1 Host: cdn.optimizely.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:00 UTC	911	IN	HTTP/1.1 200 OK Date: Fri, 07 Mar 2025 19:12:00 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: pSg0JfFa2Gfo45w7pvHVJsYaBsAC+OA/E8AgYOPP0p6AI39TMDGK1PXDfykDcdPDwOb7RqkANws= x-amz-request-id: 76KCX8M90ZEX0BDY x-amz-replication-status: PENDING Last-Modified: Tue, 04 Mar 2025 19:56:08 GMT ETag: W/"82c58c0b61ba0e2c39f7e0dad5ff84de" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120 x-amz-meta-revision: 543 x-amz-meta-pci_enabled: False x-amz-version-id: P595SJjYIoOdNXW9xSkBEFjedirjxLjt CF-Cache-Status: HIT Age: 395 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: * Access-Control-Expose-Headers: x-amz-meta-revision Access-Control-Allow-Credentials: false Access-Control-Max-Age: 86400 Server: cloudflare CF-RAY: 91cc66e21de942a6-EWR
2025-03-07 19:12:00 UTC	458	IN	Data Raw: 37 63 30 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6c 69 65 6e 74 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 31 37 38 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 69 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 63 3d 22 6f 62 6a 65 63 74 22 2c 73 3d 22 73 74 72 69 6e 67 22 2c 66 3d 22 6d 6f 64 65 6c 22 2c 6c 3d 22 6e 61 6d 65 22 2c 64 3d 22 74 79 70 65 22 2c 76 3d 22 76 65 6e 64 6f Data Ascii: 7c09/! For license information please see client.min.js.LICENSE.txt /(function(){var __webpack_modules__={1783:function(n,t,e){var i;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",v="vendo
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 69 22 2c 44 3d 22 4c 47 22 2c 4f 3d 22 4d 69 63 72 6f 73 6f 66 74 22 2c 78 3d 22 4d 6f 74 6f 72 6f 6c 61 22 2c 4d 3d 22 4f 70 65 72 61 22 2c 50 3d 22 53 61 6d 73 75 6e 67 22 2c 4c 3d 22 53 68 61 72 70 22 2c 55 3d 22 53 6f 6e 79 22 2c 56 3d 22 58 69 61 6f 6d 69 22 2c 46 3d 22 5a 65 62 72 61 22 2c 42 3d 22 46 61 63 65 62 6f 6f 6b 22 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 7b 7d 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 6e 5b 65 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3d 6e 5b 65 5d 3b 72 65 74 75 72 6e 20 74 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 3d 3d 3d 73 26 26 2d 31 21 3d 3d 47 28 74 29 2e 69 6e 64 65 78 4f 66 28 47 28 6e 29 29 Data Ascii: i",D="LG",O="Microsoft",x="Motorola",M="Opera",P="Samsung",L="Sharp",U="Sony",V="Xiaomi",F="Zebra",B="Facebook",z=function(n){for(var t={},e=0;e<n.length;e++)t[n[e].toUpperCase()]=n[e];return t},j=function(n,t){return typeof n===s&&-1!==G(t).indexOf(G(n))
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 65 74 61 62 5d 7b 33 2c 36 7d 29 5c 62 2e 2b 76 65 72 73 69 6f 6e 5c 2f 28 5b 2d 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6f 70 65 72 61 29 28 3f 3a 2e 2b 76 65 72 73 69 6f 6e 5c 2f 7c 5b 5c 2f 20 5d 2b 29 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 6c 2c 68 5d 2c 5b 2f 6f 70 69 6f 73 5b 5c 2f 20 5d 2b 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 68 2c 5b 6c 2c 4d 2b 22 20 4d 69 6e 69 22 5d 5d 2c 5b 2f 5c 62 6f 70 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 68 2c 5b 6c 2c 4d 5d 5d 2c 5b 2f 28 6b 69 6e 64 6c 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6c 75 6e 61 73 63 61 70 65 7c 6d 61 78 74 68 6f 6e 7c 6e 65 74 66 72 6f 6e 74 7c 6a 61 73 6d 69 6e 65 7c 62 6c 61 7a 65 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5d 2a 29 2f 69 2c 2f 28 61 76 61 6e 74 Data Ascii: etab]{3,6})\b.+version\/([-\w\.]+)/i,/(opera)(?:.+version\/\|[\/ ]+)([\w\.]+)/i],[l,h],[/opios[\/ ]+([\w\.]+)/i],[h,[l,M+" Mini"]],[/\bopr\/([\w\.]+)/i],[h,[l,M]],[/(kindle)\/([\w\.]+)/i,/(lunascape\|maxthon\|netfront\|jasmine\|blazer)[\/ ]?([\w\.]*)/i,/(avant
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 73 61 69 6c 66 69 73 68 7c 68 75 61 77 65 69 29 62 72 6f 77 73 65 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 6c 2c 2f 28 2e 2b 29 2f 2c 22 24 31 20 22 2b 54 5d 2c 68 5d 2c 5b 2f 28 63 6f 6d 6f 64 6f 5f 64 72 61 67 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 6c 2c 2f 5f 2f 67 2c 22 20 22 5d 2c 68 5d 2c 5b 2f 28 65 6c 65 63 74 72 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 20 73 61 66 61 72 69 2f 69 2c 2f 28 74 65 73 6c 61 29 28 3f 3a 20 71 74 63 61 72 62 72 6f 77 73 65 72 7c 5c 2f 28 32 30 5c 64 5c 64 5c 2e 5b 2d 5c 77 5c 2e 5d 2b 29 29 2f 69 2c 2f 6d 3f 28 71 71 62 72 6f 77 73 65 72 7c 62 61 69 64 75 62 6f 78 61 70 70 7c 32 33 34 35 45 78 70 6c 6f 72 65 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 6c 2c 68 5d Data Ascii: sailfish\|huawei)browser\/([\w\.]+)/i],[[l,/(.+)/,"$1 "+T],h],[/(comodo_dragon)\/([\w\.]+)/i],[[l,/_/g," "],h],[/(electron)\/([\w\.]+) safari/i,/(tesla)(?: qtcarbrowser\|\/(20\d\d\.[-\w\.]+))/i,/m?(qqbrowser\|baiduboxapp\|2345Explorer)[\/ ]?([\w\.]+)/i],[l,h]
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 74 66 6f 78 29 2f 69 2c 2f 28 69 63 65 64 72 61 67 6f 6e 7c 69 63 65 77 65 61 73 65 6c 7c 63 61 6d 69 6e 6f 7c 63 68 69 6d 65 72 61 7c 66 65 6e 6e 65 63 7c 6d 61 65 6d 6f 20 62 72 6f 77 73 65 72 7c 6d 69 6e 69 6d 6f 7c 63 6f 6e 6b 65 72 6f 72 7c 6b 6c 61 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5c 2b 5d 2b 29 2f 69 2c 2f 28 73 65 61 6d 6f 6e 6b 65 79 7c 6b 2d 6d 65 6c 65 6f 6e 7c 69 63 65 63 61 74 7c 69 63 65 61 70 65 7c 66 69 72 65 62 69 72 64 7c 70 68 6f 65 6e 69 78 7c 70 61 6c 65 6d 6f 6f 6e 7c 62 61 73 69 6c 69 73 6b 7c 77 61 74 65 72 66 6f 78 29 5c 2f 28 5b 2d 5c 77 5c 2e 5d 2b 29 24 2f 69 2c 2f 28 66 69 72 65 66 6f 78 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6d 6f 7a 69 6c 6c 61 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 20 2e 2b 72 76 5c 3a 2e Data Ascii: tfox)/i,/(icedragon\|iceweasel\|camino\|chimera\|fennec\|maemo browser\|minimo\|conkeror\|klar)[\/ ]?([\w\.\+]+)/i,/(seamonkey\|k-meleon\|icecat\|iceape\|firebird\|phoenix\|palemoon\|basilisk\|waterfox)\/([-\w\.]+)$/i,/(firefox)\/([\w\.]+)/i,/(mozilla)\/([\w\.]+) .+rv\:.
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 76 2c 49 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 6d 61 63 69 6e 74 6f 73 68 29 3b 2f 69 5d 2c 5b 66 2c 5b 76 2c 49 5d 5d 2c 5b 2f 5c 62 28 73 68 2d 3f 5b 61 6c 74 76 7a 5d 3f 5c 64 5c 64 5b 61 2d 65 6b 6d 5d 3f 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 4c 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 28 3f 3a 61 67 5b 72 73 5d 5b 32 33 5d 3f 7c 62 61 68 32 3f 7c 73 68 74 3f 7c 62 74 76 29 2d 61 3f 5b 6c 77 5d 5c 64 7b 32 7d 29 5c 62 28 3f 21 2e 2b 64 5c 2f 73 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 43 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 3f 3a 68 75 61 77 65 69 7c 68 6f 6e 6f 72 29 28 5b 2d 5c 77 20 5d 2b 29 5b 3b 5c 29 5d 2f 69 2c 2f 5c 62 28 6e 65 78 75 73 20 36 70 7c 5c 77 7b 32 2c 34 7d 65 3f 2d 5b 61 74 75 5d 3f 5b 6c 6e 5d 5b 5c 64 78 5d 5b 30 31 32 33 35 39 63 5d 5b 61 64 Data Ascii: v,I],[d,_]],[/(macintosh);/i],[f,[v,I]],[/\b(sh-?[altvz]?\d\d[a-ekm]?)/i],[f,[v,L],[d,m]],[/\b((?:ag[rs][23]?\|bah2?\|sht?\|btv)-a?[lw]\d{2})\b(?!.+d\/s)/i],[f,[v,C],[d,_]],[/(?:huawei\|honor)([-\w ]+)[;\)]/i,/\b(nexus 6p\|\w{2,4}e?-[atu]?[ln][\dx][012359c][ad
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 20 5d 2b 29 2f 69 2c 2f 6c 65 6e 6f 76 6f 20 3f 28 73 5b 35 36 5d 30 30 30 5b 2d 5c 77 5d 2b 7c 74 61 62 28 3f 3a 5b 5c 77 20 5d 2b 29 7c 79 74 5b 2d 5c 64 5c 77 5d 7b 36 7d 7c 74 62 5b 2d 5c 64 5c 77 5d 7b 36 7d 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4c 65 6e 6f 76 6f 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 3f 3a 6d 61 65 6d 6f 7c 6e 6f 6b 69 61 29 2e 2a 28 6e 39 30 30 7c 6c 75 6d 69 61 20 5c 64 2b 29 2f 69 2c 2f 6e 6f 6b 69 61 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5c 2e 5d 2a 29 2f 69 5d 2c 5b 5b 66 2c 2f 5f 2f 67 2c 22 20 22 5d 2c 5b 76 2c 22 4e 6f 6b 69 61 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 28 70 69 78 65 6c 20 63 29 5c 62 2f 69 5d 2c 5b 66 2c 5b 76 2c 4e 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 70 69 78 65 6c 5b 5c 64 61 78 6c 20 5d 7b Data Ascii: ]+)/i,/lenovo ?(s[56]000[-\w]+\|tab(?:[\w ]+)\|yt[-\d\w]{6}\|tb[-\d\w]{6})/i],[f,[v,"Lenovo"],[d,_]],[/(?:maemo\|nokia).(n900\|lumia \d+)/i,/nokia[-_ ]?([-\w\.])/i],[[f,/_/g," "],[v,"Nokia"],[d,m]],[/(pixel c)\b/i],[f,[v,N],[d,_]],[/droid.+; (pixel[\daxl ]{
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 6e 6f 74 65 29 20 62 75 69 2f 69 2c 2f 5c 62 6d 7a 2d 28 5b 2d 5c 77 5d 7b 32 2c 7d 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4d 65 69 7a 75 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 28 62 6c 61 63 6b 62 65 72 72 79 7c 62 65 6e 71 7c 70 61 6c 6d 28 3f 3d 5c 2d 29 7c 73 6f 6e 79 65 72 69 63 73 73 6f 6e 7c 61 63 65 72 7c 61 73 75 73 7c 64 65 6c 6c 7c 6d 65 69 7a 75 7c 6d 6f 74 6f 72 6f 6c 61 7c 70 6f 6c 79 74 72 6f 6e 29 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5d 2a 29 2f 69 2c 2f 28 68 70 29 20 28 5b 5c 77 20 5d 2b 5c 77 29 2f 69 2c 2f 28 61 73 75 73 29 2d 3f 28 5c 77 2b 29 2f 69 2c 2f 28 6d 69 63 72 6f 73 6f 66 74 29 3b 20 28 6c 75 6d 69 61 5b 5c 77 20 5d 2b 29 2f 69 2c 2f 28 6c 65 6e 6f 76 6f 29 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5d 2b 29 2f 69 2c 2f 28 6a 6f 6c 6c 61 29 2f Data Ascii: note) bui/i,/\bmz-([-\w]{2,})/i],[f,[v,"Meizu"],[d,m]],[/(blackberry\|benq\|palm(?=\-)\|sonyericsson\|acer\|asus\|dell\|meizu\|motorola\|polytron)[-_ ]?([-\w]*)/i,/(hp) ([\w ]+\w)/i,/(asus)-?(\w+)/i,/(microsoft); (lumia[\w ]+)/i,/(lenovo)[-_ ]?([-\w]+)/i,/(jolla)/
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 66 2c 5b 76 2c 22 49 6e 73 69 67 6e 69 61 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 5c 62 28 28 6e 78 61 7c 6e 65 78 74 29 2d 3f 5c 77 7b 30 2c 39 7d 29 20 62 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4e 65 78 74 42 6f 6f 6b 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 5c 62 28 78 74 72 65 6d 65 5c 5f 29 3f 28 76 28 31 5b 30 34 35 5d 7c 32 5b 30 31 35 5d 7c 5b 33 34 36 39 5d 30 7c 37 5b 30 35 5d 29 29 20 62 2f 69 5d 2c 5b 5b 76 2c 22 56 6f 69 63 65 22 5d 2c 66 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 6c 76 74 65 6c 5c 2d 29 3f 28 76 31 5b 31 32 5d 29 20 62 2f 69 5d 2c 5b 5b 76 2c 22 4c 76 54 65 6c 22 5d 2c 66 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 70 68 2d 31 29 20 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 45 73 73 65 6e 74 69 61 6c 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 76 28 31 30 Data Ascii: f,[v,"Insignia"],[d,_]],[/\b((nxa\|next)-?\w{0,9}) b/i],[f,[v,"NextBook"],[d,_]],[/\b(xtreme\_)?(v(1[045]\|2[015]\|[3469]0\|7[05])) b/i],[[v,"Voice"],f,[d,m]],[/\b(lvtel\-)?(v1[12]) b/i],[[v,"LvTel"],f,[d,m]],[/\b(ph-1) /i],[f,[v,"Essential"],[d,m]],[/\b(v(10
2025-03-07 19:12:00 UTC	1369	IN	Data Raw: 2c 5b 64 2c 67 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 73 68 69 65 6c 64 29 20 62 75 69 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4e 76 69 64 69 61 22 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 70 6c 61 79 73 74 61 74 69 6f 6e 20 5b 33 34 35 70 6f 72 74 61 62 6c 65 76 69 5d 2b 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 55 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 5c 62 28 78 62 6f 78 28 3f 3a 20 6f 6e 65 29 3f 28 3f 21 3b 20 78 62 6f 78 29 29 5b 5c 29 3b 20 5d 2f 69 5d 2c 5b 66 2c 5b 76 2c 4f 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 28 70 65 62 62 6c 65 29 29 61 70 70 2f 69 5d 2c 5b 76 2c 66 2c 5b 64 2c 79 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 67 6c 61 73 73 29 20 5c 64 2f 69 5d 2c 5b 66 2c 5b 76 2c 4e 5d 2c 5b 64 2c 79 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 77 74 36 33 3f 30 Data Ascii: ,[d,g]],[/droid.+; (shield) bui/i],[f,[v,"Nvidia"],[d,g]],[/(playstation [345portablevi]+)/i],[f,[v,U],[d,g]],[/\b(xbox(?: one)?(?!; xbox))[\); ]/i],[f,[v,O],[d,g]],[/((pebble))app/i],[v,f,[d,y]],[/droid.+; (glass) \d/i],[f,[v,N],[d,y]],[/droid.+; (wt63?0

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:00 UTC	568	OUT	OPTIONS /sdk/goals/61e83cfd8ac5a016e6f0d0b6 HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper Origin: https://gamma.app User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:00 UTC	767	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Allow: GET, OPTIONS, HEAD Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Date: Fri, 07 Mar 2025 19:12:00 GMT Via: 1.1 varnish X-Served-By: cache-lga21955-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1741374721.621460,VS0,VE9 Vary: Accept-Encoding Age: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present#card-wdvd2twm5f65uwl

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Windows Analysis Report
https://aa1selfstorage.com/ioeloro/?wptouch_switch=mobile&redirect=//gamma.app/docs/Untitled-fw6wys6ubo63z1u?mode=present#card-wdvd2twm5f65uwl

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:00 UTC	605	OUT	POST /v1/user-context HTTP/1.1 Host: events.api.gamma.app Connection: keep-alive Content-Length: 202 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain sec-ch-ua-mobile: ?0 Accept: / Origin: https://gamma.app Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:00 UTC	202	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 33 34 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 63 61 6d 70 61 69 67 6e 22 3a 6e 75 6c 6c 7d 7d Data Ascii: {"context":{"timezone":"America/New_York","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","locale":"en-US","campaign":null}}
2025-03-07 19:12:01 UTC	311	IN	HTTP/1.1 200 OK Date: Fri, 07 Mar 2025 19:12:00 GMT Content-Type: application/json; charset=utf-8 Content-Length: 392 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: https://gamma.app Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"188-cbv9WfcWCIqUbgOcgPOtHq8AKFg"
2025-03-07 19:12:01 UTC	392	IN	Data Raw: 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 33 34 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 63 61 6d 70 61 69 67 6e 22 3a 6e 75 6c 6c 2c 22 69 70 22 3a 22 32 34 2e 32 34 36 2e 32 33 38 2e 31 37 37 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 63 69 74 79 22 3a 22 50 6f 63 6f 6e 6f 20 53 75 6d 6d 69 74 22 2c 22 63 6f 75 6e 74 72 79 Data Ascii: {"timezone":"America/New_York","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","locale":"en-US","campaign":null,"ip":"24.246.238.177","location":{"city":"Pocono Summit","country

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:00 UTC	594	OUT	POST /v1/i HTTP/1.1 Host: events.api.gamma.app Connection: keep-alive Content-Length: 951 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain sec-ch-ua-mobile: ?0 Accept: / Origin: https://gamma.app Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:00 UTC	951	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 33 2d 30 37 54 31 39 3a 31 31 3a 35 37 2e 32 34 36 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 69 70 30 39 34 67 62 69 63 76 34 65 74 33 65 22 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 66 79 22 2c 22 75 73 65 72 49 64 22 3a 6e 75 6c 6c 2c 22 74 72 61 69 74 73 22 3a 7b 22 69 73 5f 67 61 6d 6d 61 5f 65 6d 70 6c 6f 79 65 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 5f 6f 72 67 5f 69 64 22 3a 22 6e 6f 5f 6f 72 67 5f 69 64 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 5f 75 73 65 72 22 3a 74 72 75 65 2c 22 61 6e 6f 6e 79 6d 6f 75 73 5f 75 73 65 72 5f 69 64 22 3a 22 69 70 30 39 34 67 62 69 63 76 34 65 74 33 65 22 2c 22 67 61 6d 6d 61 5f 75 73 65 72 Data Ascii: {"timestamp":"2025-03-07T19:11:57.246Z","integrations":{},"anonymousId":"ip094gbicv4et3e","type":"identify","userId":null,"traits":{"is_gamma_employee":false,"user_org_id":"no_org_id","anonymous_user":true,"anonymous_user_id":"ip094gbicv4et3e","gamma_user
2025-03-07 19:12:01 UTC	309	IN	HTTP/1.1 200 OK Date: Fri, 07 Mar 2025 19:12:00 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: https://gamma.app Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
2025-03-07 19:12:01 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:00 UTC	870	OUT	OPTIONS /sdk/evalx/61e83cfd8ac5a016e6f0d0b6/contexts/eyJraW5kIjoibXVsdGkiLCJ1c2VyIjp7ImtleSI6ImxkX2Fub255bW91c191c2VyIiwiYW5vbnltb3VzIjp0cnVlLCJpc0dhbW1hRTJFIjpmYWxzZSwiaXNHYW1tYVVzZXIiOmZhbHNlLCJvcmdJZCI6Im5vX29yZ19pZCIsImlzTW9iaWxlRGV2aWNlIjpmYWxzZSwiZGVwbG95VGltZSI6MTc0MTI5MzExOTg4OCwiZGVwbG95bWVudEhhc2giOiIxdjl4Y3JuMjIifX0?withReasons=true HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper Origin: https://gamma.app User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:01 UTC	767	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Allow: GET, OPTIONS, HEAD Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Date: Fri, 07 Mar 2025 19:12:00 GMT Via: 1.1 varnish X-Served-By: cache-lga21956-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1741374721.814004,VS0,VE8 Vary: Accept-Encoding Age: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:03 UTC	517	OUT	GET /api/5776661/envelope/?sentry_key=824b9acd00f449f283554475ff8303bb&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.8.0 HTTP/1.1 Host: o698378.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:03 UTC	290	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Fri, 07 Mar 2025 19:12:03 GMT Content-Type: text/html Content-Length: 548 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-07 19:12:03 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:03 UTC	668	OUT	GET /sdk/goals/61e83cfd8ac5a016e6f0d0b6 HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive X-LaunchDarkly-Wrapper: react-client-sdk-gamma sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-LaunchDarkly-User-Agent: JSClient/3.5.0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://gamma.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:04 UTC	889	IN	HTTP/1.1 200 OK Connection: close Content-Length: 166 Content-Type: application/json Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 Cache-Control: max-age=0 Content-Md5: 8082e2de4de1b83503e3a6e82eae19ad Etag: "8082e2de4de1b83503e3a6e82eae19ad" Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Date: Fri, 07 Mar 2025 19:12:03 GMT Via: 1.1 varnish X-Served-By: cache-lga21925-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1741374724.826974,VS0,VE11 Vary: Accept-Encoding Age: 0
2025-03-07 19:12:04 UTC	166	IN	Data Raw: 5b 7b 22 6b 65 79 22 3a 22 34 64 35 61 65 36 63 34 2d 32 63 39 64 2d 34 66 62 34 2d 61 64 35 30 2d 36 65 33 30 61 65 61 30 62 62 31 33 22 2c 22 6b 69 6e 64 22 3a 22 63 6c 69 63 6b 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 5b 64 61 74 61 2d 74 65 73 74 2d 69 64 3d 5c 22 61 69 2d 63 72 65 64 69 74 73 2d 75 70 73 65 6c 6c 5c 22 5d 22 2c 22 75 72 6c 73 22 3a 5b 7b 22 6b 69 6e 64 22 3a 22 73 75 62 73 74 72 69 6e 67 22 2c 22 73 75 62 73 74 72 69 6e 67 22 3a 22 68 74 74 70 73 3a 2f 2f 22 7d 5d 7d 5d Data Ascii: [{"key":"4d5ae6c4-2c9d-4fb4-ad50-6e30aea0bb13","kind":"click","selector":"[data-test-id=\"ai-credits-upsell\"]","urls":[{"kind":"substring","substring":"https://"}]}]

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:03 UTC	970	OUT	GET /sdk/evalx/61e83cfd8ac5a016e6f0d0b6/contexts/eyJraW5kIjoibXVsdGkiLCJ1c2VyIjp7ImtleSI6ImxkX2Fub255bW91c191c2VyIiwiYW5vbnltb3VzIjp0cnVlLCJpc0dhbW1hRTJFIjpmYWxzZSwiaXNHYW1tYVVzZXIiOmZhbHNlLCJvcmdJZCI6Im5vX29yZ19pZCIsImlzTW9iaWxlRGV2aWNlIjpmYWxzZSwiZGVwbG95VGltZSI6MTc0MTI5MzExOTg4OCwiZGVwbG95bWVudEhhc2giOiIxdjl4Y3JuMjIifX0?withReasons=true HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive X-LaunchDarkly-Wrapper: react-client-sdk-gamma sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-LaunchDarkly-User-Agent: JSClient/3.5.0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://gamma.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:04 UTC	756	IN	HTTP/1.1 200 OK Connection: close Content-Length: 39772 content-type: application/json cache-control: max-age=0 etag: "1931dbb" access-control-allow-origin: * access-control-max-age: 3600 access-control-allow-methods: OPTIONS, GET access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, Ld-Api-Version Accept-Ranges: bytes Date: Fri, 07 Mar 2025 19:12:03 GMT Via: 1.1 varnish X-Served-By: cache-lga21983-LGA, cache-lga21988-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1741374724.936121,VS0,VE58 Vary: Authorization, Accept-Encoding Age: 0
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 7b 22 61 63 63 65 6e 74 49 6d 61 67 65 46 69 74 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 33 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 64 64 43 61 72 64 32 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 30 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 Data Ascii: {"accentImageFit":{"flagVersion":3,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"addCard2":{"flagVersion":10,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 43 61 72 64 4e 6f 74 65 73 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 36 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 43 68 61 74 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 38 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c Data Ascii: nd":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"aiCardNotes":{"flagVersion":6,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"aiChat":{"flagVersion":8,"reason":{"kind":"FAL
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 76 61 72 69 61 74 69 6f 6e 22 3a 37 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 47 65 6e 65 72 61 74 65 64 49 6d 61 67 65 73 49 6e 57 69 7a 61 72 64 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 38 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 47 65 6e 65 72 61 74 6f 72 44 65 66 61 75 6c 74 49 6d 61 67 65 50 72 6f 76 69 64 65 72 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 36 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 Data Ascii: variation":7,"version":1931},"aiGeneratedImagesInWizard":{"flagVersion":8,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"aiGeneratorDefaultImageProvider":{"flagVersion":56,"reason":{"kind":"FALLTHROUGH"},"t
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 49 6d 61 67 65 73 44 61 73 68 62 6f 61 72 64 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 37 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 4a 53 58 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 36 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 Data Ascii: rackEvents":false,"value":true,"variation":0,"version":1931},"aiImagesDashboard":{"flagVersion":7,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"aiJSX":{"flagVersion":16,"reason":{"kind":"FALLTHROUGH"},"tra
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 7d 2c 22 61 69 53 65 61 72 63 68 4d 6f 64 65 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 34 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 69 73 61 62 6c 65 64 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 32 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 53 65 61 72 63 68 4f 70 74 69 6f 6e 61 6c 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 Data Ascii: },"aiSearchMode":{"flagVersion":24,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":"Disabled","variation":2,"version":1931},"aiSearchOptional":{"flagVersion":5,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":false,"variation":1,"ve
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 32 38 30 30 30 30 2e 30 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 35 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 57 69 7a 61 72 64 47 6f 6f 67 6c 65 49 6d 61 67 65 73 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 4f 46 46 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 69 57 69 7a 61 72 64 4f 75 74 6c 69 6e 65 4d 61 78 57 61 69 74 22 3a 7b 22 66 6c Data Ascii: reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":280000.0,"variation":5,"version":1931},"aiWizardGoogleImages":{"flagVersion":4,"reason":{"kind":"OFF"},"trackEvents":false,"value":false,"variation":1,"version":1931},"aiWizardOutlineMaxWait":{"fl
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 22 76 61 6c 75 65 22 3a 22 64 6f 6c 6c 61 72 73 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 6e 74 68 72 6f 70 69 63 47 65 6e 65 72 61 74 65 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 36 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 61 75 74 6f 5a 6f 6f 6d 54 6f 46 69 74 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 37 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 Data Ascii: "value":"dollars","variation":1,"version":1931},"anthropicGenerate":{"flagVersion":26,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"autoZoomToFit":{"flagVersion":7,"reason":{"kind":"FALLTHROUGH"},"trackEve
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 62 75 6c 6b 55 70 6c 6f 61 64 41 63 63 65 6e 74 49 6d 61 67 65 73 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 33 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 63 61 6c 6c 6f Data Ascii: {"flagVersion":5,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"bulkUploadAccentImages":{"flagVersion":3,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"callo
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 63 61 72 64 56 69 65 77 65 64 54 68 72 65 73 68 6f 6c 64 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 31 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 31 30 30 30 2e 30 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 32 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 63 61 72 64 57 69 64 74 68 4f 70 74 69 6f 6e 73 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 36 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a Data Ascii: :true,"variation":0,"version":1931},"cardViewedThreshold":{"flagVersion":11,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":1000.0,"variation":2,"version":1931},"cardWidthOptions":{"flagVersion":6,"reason":{"kind":"FALLTHROUGH"},"trackEvents":
2025-03-07 19:12:04 UTC	1379	IN	Data Raw: 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 63 6f 64 65 42 6c 6f 63 6b 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 46 41 4c 4c 54 48 52 4f 55 47 48 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 31 39 33 31 7d 2c 22 63 6f 6e 64 65 6e 73 65 64 54 68 65 6d 65 50 69 63 6b 65 72 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 2c 22 72 65 61 73 6f 6e 22 3a 7b 22 6b 69 6e 64 22 3a 22 4f 46 46 22 7d 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a Data Ascii: ue":true,"variation":0,"version":1931},"codeBlock":{"flagVersion":4,"reason":{"kind":"FALLTHROUGH"},"trackEvents":false,"value":true,"variation":0,"version":1931},"condensedThemePicker":{"flagVersion":2,"reason":{"kind":"OFF"},"trackEvents":false,"value":

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:03 UTC	756	OUT	GET /client_storage/a187838077.html HTTP/1.1 Host: a187838077.cdn.optimizely.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:04 UTC	614	IN	HTTP/1.1 200 OK Date: Fri, 07 Mar 2025 19:12:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 91cc66f8befe1f20-PHL CF-Cache-Status: HIT Cache-Control: max-age=120 Last-Modified: Tue, 04 Mar 2025 19:56:04 GMT x-amz-id-2: dkM2AJPDPlxJp4zQPIt/vD+79V6dZZTrQvVTQvPPyN8WA2epJN4qafuZ6Z5v1PCSBpE+fn1OTH4= x-amz-meta-pci_enabled: False x-amz-replication-status: COMPLETED x-amz-request-id: 3J06PJ6PNDJ6RCRM x-amz-server-side-encryption: AES256 x-amz-version-id: ad8HTJq6br.7TtWWlfhMO.KUQ_Ag.cjb Server-Timing: cfCacheStatus;desc="HIT" Server: cloudflare
2025-03-07 19:12:04 UTC	755	IN	Data Raw: 35 65 61 0d 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 76 61 72 20 61 6c 6c 6f 77 65 64 4f 72 69 67 69 6e 73 20 3d 20 5b 5b 22 5e 77 77 77 5c 5c 2e 61 74 74 69 63 61 6e 64 62 75 74 74 6f 6e 5c 5c 2e 75 73 24 22 2c 20 22 22 5d 2c 20 5b 22 5e 24 22 2c 20 22 22 5d 2c 20 5b 22 61 74 74 69 63 61 6e 64 62 75 74 74 6f 6e 22 2c 20 22 22 5d 5d 3b 0a 76 61 72 20 62 6c 6f 63 6b 65 64 4f 72 69 67 69 6e 73 20 3d 20 5b 5d 3b 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 2c 6c 2c 72 2c 63 3b 74 72 79 7b 64 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7d 63 61 74 63 68 28 65 29 7b 6c 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 21 63 7c 7c 30 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 63 2e 6f Data Ascii: 5ea<script>var allowedOrigins = [["^www\\.atticandbutton\\.us$", ""], ["^$", ""], ["atticandbutton", ""]];var blockedOrigins = [];!function(){"use strict";var d,l,r,c;try{d=window.localStorage}catch(e){l=e}function u(e){return!c\|\|0!==e.indexOf(c.o
2025-03-07 19:12:04 UTC	766	IN	Data Raw: 6b 7d 69 66 28 73 29 7b 63 3d 65 3b 74 72 79 7b 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 64 61 74 61 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 7d 69 66 28 74 3d 65 2e 6f 72 69 67 69 6e 2b 22 5f 22 2b 69 2e 6b 65 79 2c 21 64 29 72 65 74 75 72 6e 20 70 28 6c 29 3b 69 66 28 22 47 45 54 22 3d 3d 3d 69 2e 74 79 70 65 29 72 3d 64 2e 67 65 74 49 74 65 6d 28 74 29 3b 65 6c 73 65 20 69 66 28 22 50 55 54 22 3d 3d 3d 69 2e 74 79 70 65 29 74 72 79 7b 72 3d 64 2e 73 65 74 49 74 65 6d 28 74 2c 69 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 70 28 65 29 7d 65 6c 73 65 20 69 66 28 22 47 45 54 41 4c 4c 22 3d 3d 3d 69 2e 74 79 70 65 29 66 6f 72 28 76 61 72 20 61 20 69 6e 20 72 3d 7b 7d 2c 64 29 64 2e 68 61 73 4f Data Ascii: k}if(s){c=e;try{i=JSON.parse(e.data)}catch(e){return void 0}if(t=e.origin+"_"+i.key,!d)return p(l);if("GET"===i.type)r=d.getItem(t);else if("PUT"===i.type)try{r=d.setItem(t,i.value)}catch(e){return p(e)}else if("GETALL"===i.type)for(var a in r={},d)d.hasO
2025-03-07 19:12:04 UTC	479	IN	Data Raw: 31 64 38 0d 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 63 64 31 35 63 62 65 37 37 37 32 66 34 39 63 33 39 39 63 36 61 35 62 61 62 66 32 32 63 31 32 34 31 37 31 37 36 38 39 31 37 36 30 31 35 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 5a 70 73 4f 6d 6c 52 51 56 36 79 39 30 37 54 49 30 64 4b 42 48 71 39 4d 64 32 39 6e 6e 61 45 49 50 6c 6b 66 38 34 72 6e 61 45 52 6e 71 36 7a 76 57 76 50 55 71 72 32 66 74 38 4d 31 61 53 32 38 6f 4e 37 32 50 64 72 43 7a 53 6a 59 34 55 36 56 61 41 77 31 45 51 3d 3d 22 20 64 61 74 61 2d 63 66 2d 62 65 61 63 6f 6e 3d 27 7b 22 72 61 79 49 64 Data Ascii: 1d8<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"rayId
2025-03-07 19:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:03 UTC	613	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 656 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://gamma.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:03 UTC	656	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 31 38 37 38 33 38 30 37 37 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 74 72 75 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 6a 73 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 32 32 30 2e 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 35 37 39 34 31 30 32 35 35 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 35 34 33 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 69 70 30 39 34 67 62 69 63 76 34 65 74 33 65 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 65 22 3a 6e 75 6c 6c 2c 22 6b 22 3a 22 22 2c Data Ascii: {"account_id":"187838077","anonymize_ip":true,"client_name":"js","client_version":"0.220.0","enrich_decisions":true,"project_id":"20579410255","revision":"543","visitors":[{"visitor_id":"ip094gbicv4et3e","session_id":"AUTO","attributes":[{"e":null,"k":"",
2025-03-07 19:12:04 UTC	592	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://gamma.app access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id Content-Type: text/plain X-Request-Id: bfb5479d-a3d7-4e56-a731-979ff1fff1e0 Date: Fri, 07 Mar 2025 19:12:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:04 UTC	1081	OUT	OPTIONS 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?withReasons=true HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper Origin: https://gamma.app User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://gamma.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 19:12:04 UTC	766	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Allow: GET, OPTIONS, HEAD Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Date: Fri, 07 Mar 2025 19:12:04 GMT Via: 1.1 varnish X-Served-By: cache-lga21934-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1741374724.338416,VS0,VE1 Vary: Accept-Encoding Age: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-07 19:12:04 UTC	655	OUT	GET /v1/user-context HTTP/1.1 Host: events.api.gamma.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Mm1MQBmVTRLWj0Cv270OTXO7U4FIs3VCBX_LnCCqQiE-1741374705-1.0.1.1-32R.U8pg3jzdcdglEUM4YC9ErGcviPRYCa2OlBcdn2p7YhiDnhZIeCtViHRPr3h.Bro1P0yrWL6x1dVMBxKNtCun9KqGk3BmDRqMn6Ww8PE; gamma_visitor_id=ip094gbicv4et3e; ajs_anonymous_id=ip094gbicv4et3e
2025-03-07 19:12:04 UTC	268	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 19:12:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 78 Connection: close X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"4e-zsIbJVw6xrpzOUC/ZlEdZPzWsAE"
2025-03-07 19:12:04 UTC	78	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 75 73 65 72 2d 63 6f 6e 74 65 78 74 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"message":"Cannot GET /v1/user-context","error":"Not Found"}