Edit tour

Windows Analysis Report
https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024

Overview

General Information

Sample URL:	https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024
Analysis ID:	1496478
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

Found iframes

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2036,i,1108262031387812706,3254694717161589974,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1724230644895&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024	HTTP Parser: Iframe src: /support/recaptcha#6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KH9KHM&gtm_auth=&gtm_preview=&gtm_cookies_win=x
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WQKBJ88&gtm_auth=&gtm_preview=&gtm_cookies_win=x
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://a20976504213.cdn.optimizely.com/client_storage/a20976504213.html
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KH9KHM&gtm_auth=&gtm_preview=&gtm_cookies_win=x
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WQKBJ88&gtm_auth=&gtm_preview=&gtm_cookies_win=x
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://a20976504213.cdn.optimizely.com/client_storage/a20976504213.html
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/880828900?random=1724230724800&cv=11&fst=1724230724800&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be48j0v891029637z876997353za201zb76997353&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&hn=www.googleadservices.com&frm=0&tiba=Freshdesk%3A%20Smart%2C%20Scalable%20Ticketing%20Solution%20%7C%20Freshworks&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=1174889448.1724230723&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/850250055?random=1724230724908&cv=11&fst=1724230724908&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be48j0z876997353za201zb76997353&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&hn=www.googleadservices.com&frm=0&tiba=Freshdesk%3A%20Smart%2C%20Scalable%20Ticketing%20Solution%20%7C%20Freshworks&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=1174889448.1724230723&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-5S1FBQDGB1&gacid=803042408.1724230724&gtm=45je48j0v872147099z876997353za200zb76997353&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=0&z=7297644
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://bs.serving-sys.com/Serving?cn=ot&onetagid=1073748049&ns=1&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_68}&us_privacy=${US_PRIVACY}&activityValues=$$Session=[Session]$$&dynamicRetargetingValues=$$$$&acp=$$$$
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/996274243?random=1724230726093&cv=11&fst=1724230726093&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be48j0v885223205z86499625za201zb6499625&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&hn=www.googleadservices.com&frm=0&tiba=Freshdesk%3A%20Smart%2C%20Scalable%20Ticketing%20Solution%20%7C%20Freshworks&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=1174889448.1724230723&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://9303576.fls.doubleclick.net/activityi;src=9303576;type=anypage;cat=fresh0;ord=1;num=2314098880181;npa=0;auiddc=1174889448.1724230723;u1=undefined;u3=GA1.1.803042408.1724230724;u4=null;u5=null;u6=null;u7=NULL;u9=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink;gdid=dYWJhMj;ps=1;pcor=1458402941;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe48j0v9190563430z86499625za201zb6499625;gcd=13l3l3l3l1l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink?
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9303576;type=anypage;cat=fresh0;ord=1;num=2314098880181;npa=0;auiddc=1174889448.1724230723;u1=undefined;u3=GA1.1.803042408.1724230724;u4=null;u5=null;u6=null;u7=NULL;u9=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink;gdid=dYWJhMj;ps=1;pcor=1458402941;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe48j0v9190563430z86499625za201zb6499625;gcd=13l3l3l3l1l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink?
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://9303576.fls.doubleclick.net/activityi;src=9303576;type=anypage;cat=fresh0;ord=1;num=9682001941505;npa=0;auiddc=1174889448.1724230723;u1=undefined;u3=GA1.1.803042408.1724230724;u4=null;u5=null;u6=null;u7=NULL;u9=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink;gdid=dYWJhMj;ps=1;pcor=1636165785;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe48j0v9190563430z86499625za201zb6499625;gcd=13l3l3l3l1l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink?
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9303576;type=anypage;cat=fresh0;ord=1;num=9682001941505;npa=0;auiddc=1174889448.1724230723;u1=undefined;u3=GA1.1.803042408.1724230724;u4=null;u5=null;u6=null;u7=NULL;u9=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink;gdid=dYWJhMj;ps=1;pcor=1636165785;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe48j0v9190563430z86499625za201zb6499625;gcd=13l3l3l3l1l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink?

Source: https://lvltechnologies.freshdesk.com/support/recaptcha#6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ	HTTP Parser: No favicon
Source: https://lvltechnologies.freshdesk.com/support/recaptcha#6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ	HTTP Parser: No favicon
Source: https://lvltechnologies.freshdesk.com/support/recaptcha#6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ	HTTP Parser: No favicon
Source: https://lvltechnologies.freshdesk.com/support/recaptcha#6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ&co=aHR0cHM6Ly9sdmx0ZWNobm9sb2dpZXMuZnJlc2hkZXNrLmNvbTo0NDM.&hl=en&v=hfUfsXWZFeg83qqxrK27GB8P&theme=light&size=normal&cb=3q3igxjsgrtq	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ&co=aHR0cHM6Ly9sdmx0ZWNobm9sb2dpZXMuZnJlc2hkZXNrLmNvbTo0NDM.&hl=en&v=hfUfsXWZFeg83qqxrK27GB8P&theme=light&size=normal&cb=3q3igxjsgrtq	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/enterprise/bframe?hl=en&v=hfUfsXWZFeg83qqxrK27GB8P&k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ	HTTP Parser: No favicon
Source: https://cdn.freshdev.io/assets/heap_receiver.html	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/996274243?random=1724230726093&cv=11&fst=1724230726093&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be48j0v885223205z86499625za201zb6499625&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&hn=www.googleadservices.com&frm=0&tiba=Freshdesk%3A%20Smart%2C%20Scalable%20Ticketing%20Solution%20%7C%20Freshworks&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=1174889448.1724230723&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1	HTTP Parser: No favicon
Source: https://s.company-target.com/s/sync?exc=lr	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=vncazz9&ref=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&upid=ed2qmbb&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://9303576.fls.doubleclick.net/activityi;dc_pre=CKS0koHchYgDFXBeHQkd678xsw;src=9303576;type=anypage;cat=fresh0;ord=1;num=9682001941505;npa=0;auiddc=1174889448.1724230723;u1=undefined;u3=GA1.1.803042408.1724230724;u4=null;u5=null;u6=null;u7=NULL;u9=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink;gdid=dYWJhMj;ps=1;pcor=1636165785;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe48j0v9190563430z86499625za201zb6499625;gcd=13l3l3l3l1l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink?	HTTP Parser: No favicon
Source: https://9303576.fls.doubleclick.net/activityi;dc_pre=CL3kkYHchYgDFftdHQkdkmgXSA;src=9303576;type=anypage;cat=fresh0;ord=1;num=2314098880181;npa=0;auiddc=1174889448.1724230723;u1=undefined;u3=GA1.1.803042408.1724230724;u4=null;u5=null;u6=null;u7=NULL;u9=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink;gdid=dYWJhMj;ps=1;pcor=1458402941;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe48j0v9190563430z86499625za201zb6499625;gcd=13l3l3l3l1l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink?	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=174588888511478933&ttd_tdid=51f0af78-1a1d-4161-80e1-da3e8c2f62ef	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=51f0af78-1a1d-4161-80e1-da3e8c2f62ef&google_gid=CAESEBvlY68-EGP5YZnbzupnRPQ&google_cver=1	HTTP Parser: No favicon

Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No <meta name="author".. found
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No <meta name="author".. found

Source: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_301.2.dr, chromecache_341.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},kk:function(){e=Cb()},od:function(){d()}}};var ic=ja(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_355.2.dr, chromecache_322.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=Zz(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Nb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},bA=function(){var a=[],b=function(c){return sb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_301.2.dr, chromecache_341.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={gh:e,eh:f,fh:g,Rh:k,Sh:m,He:n,Db:b},q=G.YT;if(q)return q.ready&&q.ready(d),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();d()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(BC(w,"iframe_api")\|\|BC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!sC&&zC(x[B],p.He))return yc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_532.2.dr	String found in binary or memory: m responsible for our chat platform and channel service strategy. The reason why we moved to Freshworks was for the APIs so that we can be our own chat client. I really enjoyed the collaboration.","nodeType":"text"}],"nodeType":"paragraph"}]},"links":{"entries":{"block":[],"inline":[]}}},"person":{"__typename":"EntityPerson","sys":{"id":"32OmY3vOH6dwAZL1C74spi"},"fullName":"Eric Bompas","role":"Product Manager, Klarna"},"image":{"__typename":"ComponentImage","sys":{"id":"3O5VtvaYOOrwT0uXxYlgio"},"internalName":"company-klarna-logo","alternateText":"Klarna","bynderImage":[{"id":"6EE397C2-9494-4EDC-B5DE2588E541D201","src":"https://dam.freshworks.com/m/29af53505aef9f5d/webimage-Klarna-logo-testimonial.jpg","name":"Klarna-logo-testimonial","tags":[],"type":"image","width":800,"height":800,"archive":0,"brandId":"8F17D55F-004D-4D20-86FDECFB43FBF507","limited":0,"fileSize":5626,"isPublic":1,"original":"https://dam.freshworks.com/m/29af53505aef9f5d/original/Klarna-logo-testimonial.webp","copyright":null,"extension":["webp"],"thumbnails":{"mini":"https://dam.freshworks.com/m/29af53505aef9f5d/mini-Klarna-logo-testimonial.jpg","thul":"https://dam.freshworks.com/m/29af53505aef9f5d/thul-Klarna-logo-testimonial.jpg","original":"https://dam.freshworks.com/m/29af53505aef9f5d/original/Klarna-logo-testimonial.webp","webimage":"https://dam.freshworks.com/m/29af53505aef9f5d/webimage-Klarna-logo-testimonial.jpg"},"dateCreated":"2023-01-23T17:20:29Z","description":null,"orientation":"square","watermarked":0,"dateModified":"2023-01-23T17:20:29Z","datePublished":"2023-01-23T17:20:06Z","videoPreviewURLs":[]}]},"fullStoryUrl":"https://www.youtube.com/watch?v=sWHw2SvmQ7g","background":"Primary Green-300","ctaLabel":"Watch video"},{"__typename":"ComponentTestimonialCard","sys":{"id":"8KNMmmre7OaYRU1WCeFtA"},"internalName":"fw-fd-homepage-testimonials-card-restaurant365","quote":{"json":{"data":{},"nodeType":"document","content":[{"data":{},"content":[{"data":{},"marks":[],"value":"Freshdesk has scaled with us. What I love most is that I don't need an administrator to maintain it. Ticket automation, screen-share through the chat, customized portals for different segments of our users","nodeType":"text"},{"data":{},"marks":[],"value":" equals www.youtube.com (Youtube)
Source: chromecache_355.2.dr, chromecache_322.2.dr, chromecache_439.2.dr, chromecache_432.2.dr, chromecache_370.2.dr, chromecache_397.2.dr, chromecache_496.2.dr, chromecache_340.2.dr, chromecache_255.2.dr, chromecache_591.2.dr, chromecache_555.2.dr, chromecache_577.2.dr	String found in binary or memory: return b}oC.J="internal.enableAutoEventOnTimer";var ic=ja(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_558.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_558.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_558.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_355.2.dr, chromecache_322.2.dr	String found in binary or memory: var DB=function(a,b,c,d,e){var f=wz("fsl",c?"nv.mwt":"mwt",0),g;g=c?wz("fsl","nv.ids",[]):wz("fsl","ids",[]);if(!g.length)return!0;var k=Bz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ky(k,ly(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: lvltechnologies.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: static.freshdev.io
Source: global traffic	DNS traffic detected: DNS query: marketplace-us.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: cdn.freshdev.io
Source: global traffic	DNS traffic detected: DNS query: www.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: dam.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: cdn-ukwest.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: fast.wistia.com
Source: global traffic	DNS traffic detected: DNS query: alfred.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: cdn-public.sociabble.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: geoip-js.com
Source: global traffic	DNS traffic detected: DNS query: website-assets-fw.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: cdn3.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: a20976504213.cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: d952cmcgwqsjf.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: pipedream.wistia.com
Source: global traffic	DNS traffic detected: DNS query: a.quora.com
Source: global traffic	DNS traffic detected: DNS query: www.dwin1.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: freshdesk.freshsales.io
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: fw-cdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: embed-ssl.wistia.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: snippet.growsumo.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: tracking.g2crowd.com
Source: global traffic	DNS traffic detected: DNS query: cdn.popt.in
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: q.quora.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: grsm.io
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: lantern.roeyecdn.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: t.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: display.popt.in
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: secure-ds.serving-sys.com
Source: global traffic	DNS traffic detected: DNS query: affiliatepartner.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: partnerlinks.io
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: lantern.roeye.com
Source: global traffic	DNS traffic detected: DNS query: 9303576.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: q-us1.az.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: srm.af.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: c.az.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: bs.serving-sys.com
Source: global traffic	DNS traffic detected: DNS query: k-us1.az.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: distillery.wistia.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: pixel.mathtag.com
Source: global traffic	DNS traffic detected: DNS query: action.dstillery.com
Source: global traffic	DNS traffic detected: DNS query: tag.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: b-code.liadm.com
Source: global traffic	DNS traffic detected: DNS query: js-tag.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: pixel.adswizz.com
Source: global traffic	DNS traffic detected: DNS query: js.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: action.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: p1.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: rp.liadm.com
Source: global traffic	DNS traffic detected: DNS query: l.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s.ad.smaato.net
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: simplifi.partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: capi.connatix.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: sync.targeting.unrulymedia.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Wed, 21 Aug 2024 08:58:45 GMTx-amzn-RequestId: 1db581e1-0b6c-4578-88e5-76b7e6034f3dx-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: c2fa8E4KoAMEjwg=X-Cache: Error from cloudfrontVia: 1.1 2b298af2bb6f21ab0dee9e764d8bcb28.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS54-C1X-Amz-Cf-Id: fosZNn8FnmVUxoe3ByKdrmin1v4VzBYkwMkvC3DsxRVvq_VyezeZ4w==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Wed, 21 Aug 2024 08:58:47 GMTx-amzn-RequestId: fd920bb4-2161-45d7-9cdb-57939d53ea90x-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: c2fbKHpUIAMEEew=X-Cache: Error from cloudfrontVia: 1.1 23776effa8a63b2e2dccd702e73b0c86.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS54-C1X-Amz-Cf-Id: EgPLCL97lGrceP7q4cr9yK0QAWDGMEk61jiO8FCzHa_x1wUPgiQpmQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Wed, 21 Aug 2024 08:58:51 GMTx-amzn-RequestId: 31703206-80e7-4bf8-8229-84c8c7c1ba54x-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: c2fbzGnzoAMEPTg=X-Cache: Error from cloudfrontVia: 1.1 1b0117d337408839a32bf2a49b55b3f0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS54-C1X-Amz-Cf-Id: bfLz9IaLWWQa25q1-5HCjQn1c1R7792j9okJshNFcMxpYgxkTV_odg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 42Content-Type: text/plain; charset=UTF-8Date: Wed, 21 Aug 2024 08:58:54 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Wed, 21 Aug 2024 08:59:09 GMTx-amzn-RequestId: 8d30f4db-1cc7-4bdf-a0ac-7b305587b241x-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: c2femG-7oAMEc3A=X-Cache: Error from cloudfrontVia: 1.1 a36403421b18ef7385d5575765e6c414.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS54-C1X-Amz-Cf-Id: JcTS3LIzHgrgphcHJRs-fysnOFewSCFWU6c_TQ3HQsSCw_0jYFEp1g==

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2036,i,1108262031387812706,3254694717161589974,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2036,i,1108262031387812706,3254694717161589974,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: global traffic	HTTP traffic detected: GET /en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/styles/theme.css HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/vendor.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/head.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/images/no-results.png HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153023045875/original/hEAULC_SUH1U66rulOg1k36Ed6rOGZbcYw.png?1723710285 HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lvltechnologies.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/head.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /support/recaptcha HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153023045837/original/DMTdVHq0EXhH_afBPKeyjOtCrawoTYkY-w.png?1723710240 HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lvltechnologies.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024/hit HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/bottom.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/locales/en.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/single-solution.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/marketplace.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/images/no-results.png HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153023045875/original/hEAULC_SUH1U66rulOg1k36Ed6rOGZbcYw.png?1723710285 HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/styles/fonts/icomoon.ttf?qilaa4 HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://lvltechnologies.freshdesk.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://lvltechnologies.freshdesk.com/assets/cdn/portal/styles/theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/misc/logo.png HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153023045837/original/DMTdVHq0EXhH_afBPKeyjOtCrawoTYkY-w.png?1723710240 HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/integrations.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/vendor.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024/hit HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/locales/en.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/single-solution.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/bottom.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/marketplace.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/misc/logo.png HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/scripts/integrations.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /js/bg/PSKopaksc4v0TeE9MSufUBd6uLsTLN3_1JKIESb4JYg.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.recaptcha.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/PSKopaksc4v0TeE9MSufUBd6uLsTLN3_1JKIESb4JYg.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/misc/favicon.ico?702017 HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/misc/favicon.ico?702017 HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_cIf-None-Match: "a44c13cd56199dfc5fa127fbbd968ad63eacf0d7152b64b1e0f19579fdf73946"
Source: global traffic	HTTP traffic detected: GET /assets/misc/favicon.ico?702017 HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/misc/favicon.ico?702017 HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_cIf-None-Match: "a44c13cd56199dfc5fa127fbbd968ad63eacf0d7152b64b1e0f19579fdf73946"
Source: global traffic	HTTP traffic detected: GET /support/solutions/folders/153000699383 HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_c
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/styles/theme.css HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://lvltechnologies.freshdesk.com/support/solutions/folders/153000699383Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_cIf-None-Match: "9c1f7fea60d44e3d54d7648325392596a3174a85c9efd67691359d2fe52c889f"
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal/vendor.js HTTP/1.1Host: lvltechnologies.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lvltechnologies.freshdesk.com/support/solutions/folders/153000699383Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _x_m=x_cIf-None-Match: "f4fded87ddf105cc608bc988d280d5c5811cfaf4c25cc7300dc7fbb2b944b55e"

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024	0%	Avira URL Cloud	safe
https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024	1%	Virustotal		Browse
https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source	Detection	Scanner	Label	Link
https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://cookiepedia.co.uk/giving-consent-to-cookies	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://www.recaptcha.net/recaptcha/enterprise/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://td.doubleclick.net/td/buyer.wasm	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js	0%	Avira URL Cloud	safe
https://website-assets-fs.freshworks.com/attachments/ckv0x5x9i04n2v9g1nqokiop8-mips-v1.full.png	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=54C5C92B326A444F955794E2AC91E1C9	0%	Avira URL Cloud	safe
https://p1.zemanta.com/v2/p/js/48614/PAGE_VIEW/?bust=042899546411548184&optOut=false&url_referer=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink	0%	Avira URL Cloud	safe
https://alfred.freshworks.com/v1/get-wistia-data	0%	Avira URL Cloud	safe
https://simplifi.partners.tremorhub.com/sync?UISF=54C5C92B326A444F955794E2AC91E1C9	0%	Avira URL Cloud	safe
https://pixel.rubiconproject.com/tap.php?nid=5578&put=064b62b0-4bcd-48cc-ac80-c3b82aac39ac&v	0%	Avira URL Cloud	safe
https://www.froala.com/wysiwyg-editor)	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://dam.freshworks.com/m/201271b18ba1bfc1/original/headerLogoDark.webp	0%	Avira URL Cloud	safe
https://www.froala.com/wysiwyg-editor)	0%	Virustotal		Browse
https://um.simpli.fi/aa_px?sk=216773104981001202785	0%	Avira URL Cloud	safe
https://lantern.roeyecdn.com/lantern_global_18171.min.js	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js	0%	Virustotal		Browse
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=54C5C92B326A444F955794E2AC91E1C9	0%	Avira URL Cloud	safe
https://c.az.contentsquare.net/errors?v=15.7.0&pid=58736&pn=1&sn=1&uu=16014017-fdc5-a16d-bbe1-e52f02284cf9&ct=0	0%	Avira URL Cloud	safe
https://partnerlinks.io/pr/grc/pk_ZUb1nXFPs1riXIiwEozmL4trdtiWngWL	0%	Avira URL Cloud	safe
https://marketplace-us.freshworks.com/api/v1/installations?product=freshdesk&account=3317779&detailed=true&type=1,4,6&enabled=true&installation_types=live	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153023045837/original/DMTdVHq0EXhH_afBPKeyjOtCrawoTYkY-w.png?1723710240	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/850250055/?random	0%	Avira URL Cloud	safe
http://freshworks.com/crm/lp/freshsales-brand/	0%	Avira URL Cloud	safe
https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigu	0%	Avira URL Cloud	safe
https://d952cmcgwqsjf.cloudfront.net/assets/analytics.js	0%	Avira URL Cloud	safe
https://cdn-ukwest.onetrust.com/consent/2a76c653-4097-454f-9172-b4ab95061efd/01904e63-efaf-7d0b-a6fa-6850a8a71030/en.json	0%	Avira URL Cloud	safe
https://www.freshworks.com/icons/sprites.svg	0%	Avira URL Cloud	safe
https://loadm.exelator.com/load/?p=204&g=2191&simid=54C5C92B326A444F955794E2AC91E1C9&j=0&xl8blockcheck=1	0%	Avira URL Cloud	safe
https://www.freshworks.com/_next/static/chunks/421-7e33fd3d6a31b8bd.js	0%	Avira URL Cloud	safe
https://my-8587dc8f8cdd0cf16935787.freshchat.com	0%	Avira URL Cloud	safe
https://a20976504213.cdn.optimizely.com/cdn-cgi/rum?	0%	Avira URL Cloud	safe
https://d952cmcgwqsjf.cloudfront.net/assets/analytics.js	0%	Virustotal		Browse
https://q.quora.com/_/ad/5aad95eceb754719af7f4e619a0230c2/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink	0%	Avira URL Cloud	safe
https://um.simpli.fi/yahoo	0%	Avira URL Cloud	safe
https://um.simpli.fi/exelatem	0%	Avira URL Cloud	safe
https://cdn.us.heap-api.com/config/	0%	Avira URL Cloud	safe
https://www.freshworks.com	0%	Avira URL Cloud	safe
https://dam.freshworks.com/m/29af53505aef9f5d/mini-Klarna-logo-testimonial.jpg	0%	Avira URL Cloud	safe
https://embed-cloudfront.wistia.com/deliveries/757d2f57eac6fe4f591238158825179a7cfba3d3.m3u8	0%	Avira URL Cloud	safe
https://um.simpli.fi/exelatem	0%	Virustotal		Browse
https://um.simpli.fi/yahoo	0%	Virustotal		Browse
https://my-8587dc8f8cdd0cf16935787.freshchat.com	0%	Virustotal		Browse
https://analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=1d11dd82-11da-4f01-9848-ad9161944b16&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=970eb01d-9012-4d2f-b2d0-fbe84ae772f2&tw_document_href=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3535&type=javascript&version=2.3.30	0%	Avira URL Cloud	safe
https://cdn-public.sociabble.com/blob/js/leadgen/track.min.js?v=1.7	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=424906021678017&ev=PageView&dl=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&rl=&if=false&ts=1724230731548&sw=1280&sh=1024&v=2.9.165&r=stable&ec=0&o=4126&fbp=fb.1.1724230727821.806481086556122925&ler=empty&cdl=API_unavailable&it=1724230725213&coo=false&rqm=GET	0%	Avira URL Cloud	safe
https://www.freshworks.com/_next/image/?url=%2F_next%2Fstatic%2Fmedia%2Fchat-icon.e2833188.png&w=1920&q=75	0%	Avira URL Cloud	safe
https://www.freshworks.com/pl/	0%	Avira URL Cloud	safe
https://cdn-public.sociabble.com/blob/js/leadgen/track.min.js?v=1.7	0%	Virustotal		Browse
https://pixel.adswizz.com/update_pixel?key=72cc214741d32bda050156c5b6a053f2eb3e0378759bcf9090456bbf9fbc3d20	0%	Avira URL Cloud	safe
https://api.company-target.com/api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&page_title=Freshdesk%3A%20Smart%2C%20Scalable%20Ticketing%20Solution%20%7C%20Freshworks	0%	Avira URL Cloud	safe
https://website-assets-fw.freshworks.com/attachments/ckhbkyq6t02y6kmfzanx1mnio-instaprint.full.png	0%	Avira URL Cloud	safe
https://embed-cloudfront.wistia.com/deliveries/b9f7bb9d31312e32fe24dc093f65b889e2c8ad82.m3u8	0%	Avira URL Cloud	safe
https://website-assets-fs.freshworks.com/attachments/ckv0ju58r02oovtg10x4tgrzb-fast-time-to-value-1.	0%	Avira URL Cloud	safe
https://um.simpli.fi/ox_match	0%	Avira URL Cloud	safe
https://www.freshworks.com	0%	Virustotal		Browse
https://www.freshworks.com/privacy/	0%	Avira URL Cloud	safe
https://www.freshworks.com/tr/	0%	Avira URL Cloud	safe
https://um.simpli.fi/bluekai	0%	Avira URL Cloud	safe
https://www.freshworks.com/	0%	Avira URL Cloud	safe
https://website-assets-fs.freshworks.com/attachments/ckv0efayx02ndv9g1bdx8u08m-aberdeen-case-study-1	0%	Avira URL Cloud	safe
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D51f0af78-1a1d-4161-80e1-da3e8c2f62ef	0%	Avira URL Cloud	safe
https://embed-cloudfront.wistia.com/deliveries/757d2f57eac6fe4f591238158825179a7cfba3d3.m3u8	0%	Virustotal		Browse
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153023045837/origina	0%	Avira URL Cloud	safe
https://um.simpli.fi/g_match?id=&google_gid=CAESEGvMzA2gGe5vkj1ejB6CIew&google_cver=1	0%	Avira URL Cloud	safe
https://www.freshworks.com/list-of-cookies/	0%	Avira URL Cloud	safe
https://www.freshworks.com/_next/static/chunks/pages/%5B%5B...slug%5D%5D-ecc9481504629c42.js	0%	Avira URL Cloud	safe
https://um.simpli.fi/ad_advisor	0%	Avira URL Cloud	safe
https://k-us1.az.contentsquare.net/v2/recording?rt=5&rst=1724230728133&let=1724230728743&v=15.7.0&pid=58736&pn=1&sn=1&uu=16014017-fdc5-a16d-bbe1-e52f02284cf9&ri=1&ct=2	0%	Avira URL Cloud	safe
https://sync.smartadserver.com/getuid?url=https%3A%2F%2Ffei.pro-market.net%2Fengine%3Fsite%3D161185%26size%3D1x1%26du%3D36%26csync%3D[sas_uid]	0%	Avira URL Cloud	safe
https://kushagra.dev/lab/hint/	0%	Avira URL Cloud	safe
https://partners.tremorhub.com/sync?UIDM=064b62b0-4bcd-48cc-ac80-c3b82aac39ac	0%	Avira URL Cloud	safe
https://dam.freshworks.com/m/334018e6bf9ee702/original/pearson-logo-100x50.webp	0%	Avira URL Cloud	safe
https://cdn.freshdev.io/assets/marketplace-heap.js	0%	Avira URL Cloud	safe
https://um.simpli.fi/nexxen	0%	Avira URL Cloud	safe
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-20651269-1&cid=803042408.1724230724&jid=137846558&gjid=1818508281&_gid=1054780297.1724230724&_u=YGDAiEABBAAAAGAEKC~&z=579859341	0%	Avira URL Cloud	safe
https://dam.freshworks.com/m/644bb75e662fa9e5/original/bridgestone-logo-100x50.webp	0%	Avira URL Cloud	safe
https://et.company-target.com	0%	Avira URL Cloud	safe
https://um.simpli.fi/telaria_p	0%	Avira URL Cloud	safe
https://www.freshworks.com/cn/	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/880828900/?random	0%	Avira URL Cloud	safe
https://website-assets-fs.freshworks.com/attachments/ckv0k2aix0361v9g1rbgjpvyh-payvision-case-study.	0%	Avira URL Cloud	safe
https://t.co/i/adsct?bci=3&eci=2&event_id=1d11dd82-11da-4f01-9848-ad9161944b16&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=970eb01d-9012-4d2f-b2d0-fbe84ae772f2&tw_document_href=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3535&type=javascript&version=2.3.30	0%	Avira URL Cloud	safe
https://lvltechnologies.freshdesk.com/assets/cdn/portal/vendor.js	0%	Avira URL Cloud	safe
https://www.freshworks.com/marketing-automation/email-marketing/	0%	Avira URL Cloud	safe
https://lvltechnologies.freshdesk.com/assets/cdn/portal/scripts/bottom.js	0%	Avira URL Cloud	safe
https://website-assets-fs.freshworks.com/attachments/ckv0efbv10230vtg198l4aek3-isg-case-study-1.full	0%	Avira URL Cloud	safe
https://www.freshworks.com/freshservice/	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk?	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.204.158.49	true	false	unknown
platform.twitter.map.fastly.net	151.101.8.157	true	false	unknown
stats.g.doubleclick.net	108.177.15.155	true	false	unknown
s3.amazonaws.com	52.216.54.200	true	false	unknown
t.co	93.184.221.165	true	false	unknown
d36ufq1ap5wy15.cloudfront.net	13.32.121.29	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
tracking.g2crowd.com	104.18.31.176	true	false	unknown
sync.intentiq.com	3.160.150.105	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
bcp.crwdcntrl.net	54.154.69.222	true	false	unknown
lvltechnologies.freshdesk.com	54.163.169.242	true	false	unknown
sni1gl.wpc.deltacdn.net	152.199.21.175	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
p1.zemanta.com	172.67.36.125	true	false	unknown
s.twitter.com	104.244.42.195	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	35.159.3.140	true	false	unknown
detgh1asa1dg4.cloudfront.net	18.244.18.49	true	false	unknown
reddit.map.fastly.net	151.101.193.140	true	false	unknown
googleads.g.doubleclick.net	216.58.206.34	true	false	unknown
d952cmcgwqsjf.cloudfront.net	13.35.58.106	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	34.206.229.130	true	false	unknown
fw-cdn.com	18.66.122.111	true	false	unknown
static.cloudflareinsights.com	104.16.80.73	true	false	unknown
adservice.google.com	142.250.184.194	true	false	unknown
insight.adsrvr.org	35.71.131.137	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
snippet.growsumo.com	104.18.2.70	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.207.159.248	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
rtb-csync-euw2.smartadserver.com	91.134.110.137	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
us-global-accelerator-canary.freshsales.io	52.6.133.169	true	false	unknown
freshworks.bynder.com	18.165.183.96	true	false	unknown
display.popt.in	104.21.50.204	true	false	unknown
ad.doubleclick.net	142.250.185.166	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	52.59.0.233	true	false	unknown
fei.pro-market.net	107.178.240.89	true	false	unknown
cdn.popt.in	172.67.166.202	true	false	unknown
d1p8wauaa7285.cloudfront.net	13.32.27.6	true	false	unknown
geoip-js.com	104.18.33.110	true	false	unknown
analytics.google.com	142.250.186.142	true	false	unknown
api.company-target.com	13.227.219.42	true	false	unknown
srm.af.contentsquare.net	20.75.114.39	true	false	unknown
ib.anycast.adnxs.com	37.252.171.149	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	unknown
l.contentsquare.net	54.73.151.222	true	false	unknown
lantern.roeyecdn.com	108.156.2.91	true	false	unknown
browser.sentry-cdn.com	151.101.2.217	true	false	unknown
www.freshworks.com	108.157.142.26	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	unknown
website-assets-fw.freshworks.com	108.157.142.77	true	false	unknown
eu-eb2.3lift.com	13.248.245.213	true	false	unknown
partnerlinks.io	104.18.31.133	true	false	unknown
js.sentry-cdn.com	151.101.194.217	true	false	unknown
livepixel-production.bln.liveintent.com	34.196.16.55	true	false	unknown
marketplace-us.freshworks.com	34.225.64.228	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
cm.g.doubleclick.net	142.250.185.226	true	false	unknown
sync.1rx.io	46.228.174.117	true	false	unknown
js-tag.zemanta.com	104.22.7.45	true	false	unknown
q.quora.com	52.21.56.231	true	false	unknown
grsm.io	104.18.11.212	true	false	unknown
dep.aa.contentsquare.net	51.104.148.203	true	false	unknown
logx.optimizely.com	34.49.241.189	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	unknown
cdn-ukwest.onetrust.com	104.18.32.137	true	false	unknown
alfred.freshworks.com	3.160.150.26	true	false	unknown
cdn3.optimizely.com	104.18.35.242	true	false	unknown
cdn.freshdev.io	13.35.58.64	true	false	unknown
cdn.optimizely.com	104.18.65.57	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.193.140	true	false	unknown
src.fwusercontent.com	67.202.18.49	true	false	unknown
q-us1.az.contentsquare.net	20.75.114.39	true	false	unknown
td.doubleclick.net	142.250.185.130	true	false	unknown
a20976504213.cdn.optimizely.com	104.18.65.57	true	false	unknown
my-8587dc8f8cdd0cf16935787.freshchat.com	13.248.221.98	true	false	unknown
d2rpa84eq2akk3.cloudfront.net	18.173.205.116	true	false	unknown
dart.l.doubleclick.net	142.250.185.134	true	false	unknown
pixel-origin.mathtag.com	216.200.232.249	true	false	unknown
www.recaptcha.net	142.250.184.227	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
tag.demandbase.com	18.239.50.10	true	false	unknown
i.simpli.fi	35.204.89.238	true	false	unknown
t.contentsquare.net	18.239.18.64	true	false	unknown
d2pbcviywxotf2.cloudfront.net	143.204.215.109	true	false	unknown
tag-logger.demandbase.com	18.173.205.127	true	false	unknown
d16185quy6wls6.cloudfront.net	18.66.122.32	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	34.254.135.1	true	false	unknown
tag.simpli.fi	35.204.89.238	true	false	unknown
dep-malka.af.contentsquare.net	20.85.27.251	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
lantern.roeye.com	99.81.97.84	true	false	unknown
s.ad.smaato.net	13.32.27.65	true	false	unknown
adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com	3.120.103.140	true	false	unknown
sonar-alb-4-33-15-392593804.eu-west-1.elb.amazonaws.com	54.78.11.65	true	false	unknown
load-euw1.exelator.com	54.78.254.47	true	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://p1.zemanta.com/v2/p/js/48614/PAGE_VIEW/?bust=042899546411548184&optOut=false&url_referer=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=54C5C92B326A444F955794E2AC91E1C9	false	Avira URL Cloud: safe	unknown
https://alfred.freshworks.com/v1/get-wistia-data	false	Avira URL Cloud: safe	unknown
https://simplifi.partners.tremorhub.com/sync?UISF=54C5C92B326A444F955794E2AC91E1C9	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://dam.freshworks.com/m/201271b18ba1bfc1/original/headerLogoDark.webp	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/aa_px?sk=216773104981001202785	false	Avira URL Cloud: safe	unknown
https://lantern.roeyecdn.com/lantern_global_18171.min.js	false	Avira URL Cloud: safe	unknown
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=54C5C92B326A444F955794E2AC91E1C9	false	Avira URL Cloud: safe	unknown
https://c.az.contentsquare.net/errors?v=15.7.0&pid=58736&pn=1&sn=1&uu=16014017-fdc5-a16d-bbe1-e52f02284cf9&ct=0	false	Avira URL Cloud: safe	unknown
https://partnerlinks.io/pr/grc/pk_ZUb1nXFPs1riXIiwEozmL4trdtiWngWL	false	Avira URL Cloud: safe	unknown
https://marketplace-us.freshworks.com/api/v1/installations?product=freshdesk&account=3317779&detailed=true&type=1,4,6&enabled=true&installation_types=live	false	Avira URL Cloud: safe	unknown
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153023045837/original/DMTdVHq0EXhH_afBPKeyjOtCrawoTYkY-w.png?1723710240	false	Avira URL Cloud: safe	unknown
https://cdn-ukwest.onetrust.com/consent/2a76c653-4097-454f-9172-b4ab95061efd/01904e63-efaf-7d0b-a6fa-6850a8a71030/en.json	false	Avira URL Cloud: safe	unknown
https://d952cmcgwqsjf.cloudfront.net/assets/analytics.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://www.freshworks.com/icons/sprites.svg	false	Avira URL Cloud: safe	unknown
https://loadm.exelator.com/load/?p=204&g=2191&simid=54C5C92B326A444F955794E2AC91E1C9&j=0&xl8blockcheck=1	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/_next/static/chunks/421-7e33fd3d6a31b8bd.js	false	Avira URL Cloud: safe	unknown
https://a20976504213.cdn.optimizely.com/cdn-cgi/rum?	false	Avira URL Cloud: safe	unknown
https://q.quora.com/_/ad/5aad95eceb754719af7f4e619a0230c2/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/yahoo	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://um.simpli.fi/exelatem	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024	true		unknown
https://analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=1d11dd82-11da-4f01-9848-ad9161944b16&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=970eb01d-9012-4d2f-b2d0-fbe84ae772f2&tw_document_href=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3535&type=javascript&version=2.3.30	false	Avira URL Cloud: safe	unknown
https://cdn-public.sociabble.com/blob/js/leadgen/track.min.js?v=1.7	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=424906021678017&ev=PageView&dl=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&rl=&if=false&ts=1724230731548&sw=1280&sh=1024&v=2.9.165&r=stable&ec=0&o=4126&fbp=fb.1.1724230727821.806481086556122925&ler=empty&cdl=API_unavailable&it=1724230725213&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=174588888511478933&ttd_tdid=51f0af78-1a1d-4161-80e1-da3e8c2f62ef	false		unknown
https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=51f0af78-1a1d-4161-80e1-da3e8c2f62ef&google_gid=CAESEBvlY68-EGP5YZnbzupnRPQ&google_cver=1	false		unknown
https://www.freshworks.com/_next/image/?url=%2F_next%2Fstatic%2Fmedia%2Fchat-icon.e2833188.png&w=1920&q=75	false	Avira URL Cloud: safe	unknown
https://pixel.adswizz.com/update_pixel?key=72cc214741d32bda050156c5b6a053f2eb3e0378759bcf9090456bbf9fbc3d20	false	Avira URL Cloud: safe	unknown
https://api.company-target.com/api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&page_title=Freshdesk%3A%20Smart%2C%20Scalable%20Ticketing%20Solution%20%7C%20Freshworks	false	Avira URL Cloud: safe	unknown
https://cdn.freshdev.io/assets/heap_receiver.html	false		unknown
https://um.simpli.fi/ox_match	false	Avira URL Cloud: safe	unknown
https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024	true		unknown
https://um.simpli.fi/bluekai	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D51f0af78-1a1d-4161-80e1-da3e8c2f62ef	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/g_match?id=&google_gid=CAESEGvMzA2gGe5vkj1ejB6CIew&google_cver=1	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/_next/static/chunks/pages/%5B%5B...slug%5D%5D-ecc9481504629c42.js	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/ad_advisor	false	Avira URL Cloud: safe	unknown
https://k-us1.az.contentsquare.net/v2/recording?rt=5&rst=1724230728133&let=1724230728743&v=15.7.0&pid=58736&pn=1&sn=1&uu=16014017-fdc5-a16d-bbe1-e52f02284cf9&ri=1&ct=2	false	Avira URL Cloud: safe	unknown
https://sync.smartadserver.com/getuid?url=https%3A%2F%2Ffei.pro-market.net%2Fengine%3Fsite%3D161185%26size%3D1x1%26du%3D36%26csync%3D[sas_uid]	false	Avira URL Cloud: safe	unknown
https://partners.tremorhub.com/sync?UIDM=064b62b0-4bcd-48cc-ac80-c3b82aac39ac	false	Avira URL Cloud: safe	unknown
https://cdn.freshdev.io/assets/marketplace-heap.js	false	Avira URL Cloud: safe	unknown
https://dam.freshworks.com/m/334018e6bf9ee702/original/pearson-logo-100x50.webp	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/nexxen	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-20651269-1&cid=803042408.1724230724&jid=137846558&gjid=1818508281&_gid=1054780297.1724230724&_u=YGDAiEABBAAAAGAEKC~&z=579859341	false	Avira URL Cloud: safe	unknown
https://dam.freshworks.com/m/644bb75e662fa9e5/original/bridgestone-logo-100x50.webp	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/telaria_p	false	Avira URL Cloud: safe	unknown
https://lvltechnologies.freshdesk.com/support/solutions/153000271888	false		unknown
https://t.co/i/adsct?bci=3&eci=2&event_id=1d11dd82-11da-4f01-9848-ad9161944b16&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=970eb01d-9012-4d2f-b2d0-fbe84ae772f2&tw_document_href=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3535&type=javascript&version=2.3.30	false	Avira URL Cloud: safe	unknown
https://lvltechnologies.freshdesk.com/assets/cdn/portal/vendor.js	false	Avira URL Cloud: safe	unknown
https://lvltechnologies.freshdesk.com/assets/cdn/portal/scripts/bottom.js	false	Avira URL Cloud: safe	unknown
https://lvltechnologies.freshdesk.com/support/solutions/folders/153000699383	false		unknown
https://um.simpli.fi/crwdcntrl	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://website-assets-fs.freshworks.com/attachments/ckv0x5x9i04n2v9g1nqokiop8-mips-v1.full.png	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_392.2.dr, chromecache_516.2.dr	false	URL Reputation: safe	unknown
https://pixel.rubiconproject.com/tap.php?nid=5578&put=064b62b0-4bcd-48cc-ac80-c3b82aac39ac&v	chromecache_334.2.dr	false	Avira URL Cloud: safe	unknown
https://www.froala.com/wysiwyg-editor)	chromecache_518.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_528.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-user-list/850250055/?random	chromecache_524.2.dr, chromecache_328.2.dr	false	Avira URL Cloud: safe	unknown
http://freshworks.com/crm/lp/freshsales-brand/	chromecache_546.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_572.2.dr, chromecache_331.2.dr, chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigu	chromecache_267.2.dr	false	Avira URL Cloud: safe	unknown
https://my-8587dc8f8cdd0cf16935787.freshchat.com	chromecache_396.2.dr, chromecache_483.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://cdn.us.heap-api.com/config/	chromecache_573.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com	chromecache_473.2.dr, chromecache_266.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://dam.freshworks.com/m/29af53505aef9f5d/mini-Klarna-logo-testimonial.jpg	chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://embed-cloudfront.wistia.com/deliveries/757d2f57eac6fe4f591238158825179a7cfba3d3.m3u8	chromecache_578.2.dr, chromecache_317.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_275.2.dr	false	URL Reputation: safe	unknown
https://www.freshworks.com/pl/	chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fw.freshworks.com/attachments/ckhbkyq6t02y6kmfzanx1mnio-instaprint.full.png	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://embed-cloudfront.wistia.com/deliveries/b9f7bb9d31312e32fe24dc093f65b889e2c8ad82.m3u8	chromecache_578.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fs.freshworks.com/attachments/ckv0ju58r02oovtg10x4tgrzb-fast-time-to-value-1.	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/privacy/	chromecache_542.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/tr/	chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/	chromecache_426.2.dr, chromecache_532.2.dr, chromecache_489.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fs.freshworks.com/attachments/ckv0efayx02ndv9g1bdx8u08m-aberdeen-case-study-1	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153023045837/origina	chromecache_267.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/list-of-cookies/	chromecache_580.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_572.2.dr, chromecache_331.2.dr, chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://kushagra.dev/lab/hint/	chromecache_518.2.dr	false	Avira URL Cloud: safe	unknown
https://et.company-target.com	chromecache_264.2.dr, chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://cookiepedia.co.uk/giving-consent-to-cookies	chromecache_580.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_572.2.dr, chromecache_331.2.dr, chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://www.freshworks.com/cn/	chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/880828900/?random	chromecache_530.2.dr, chromecache_273.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fs.freshworks.com/attachments/ckv0k2aix0361v9g1rbgjpvyh-payvision-case-study.	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_518.2.dr	false	URL Reputation: safe	unknown
https://www.freshworks.com/marketing-automation/email-marketing/	chromecache_473.2.dr, chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://www.recaptcha.net/recaptcha/enterprise/	chromecache_424.2.dr, chromecache_407.2.dr	false	URL Reputation: safe	unknown
https://website-assets-fs.freshworks.com/attachments/ckv0efbv10230vtg198l4aek3-isg-case-study-1.full	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_572.2.dr, chromecache_331.2.dr, chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://www.freshworks.com/freshservice/	chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_528.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/marketing-automation/ab-testing/	chromecache_473.2.dr, chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://ct.capterra.com/capterra_tracker.gif	chromecache_370.2.dr, chromecache_591.2.dr, chromecache_555.2.dr, chromecache_528.2.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net/td/buyer.wasm	chromecache_401.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
37.252.171.149	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
99.81.97.84	lantern.roeye.com	United States	16509	AMAZON-02US	false
34.206.229.130	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
108.157.142.77	website-assets-fw.freshworks.com	United States	16509	AMAZON-02US	false
142.250.185.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.244.32.109	unknown	United States	16509	AMAZON-02US	false
18.202.134.149	unknown	United States	16509	AMAZON-02US	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
13.227.219.42	api.company-target.com	United States	16509	AMAZON-02US	false
151.101.193.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
63.35.104.155	unknown	United States	16509	AMAZON-02US	false
13.35.58.64	cdn.freshdev.io	United States	16509	AMAZON-02US	false
3.160.150.26	alfred.freshworks.com	United States	16509	AMAZON-02US	false
18.65.39.11	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
54.154.69.222	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
18.244.18.115	unknown	United States	16509	AMAZON-02US	false
37.252.171.52	unknown	European Union	29990	ASN-APPNEXUS	false
143.204.215.129	unknown	United States	16509	AMAZON-02US	false
35.71.131.137	insight.adsrvr.org	United States	237	MERIT-AS-14US	false
151.101.8.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.18.30.176	unknown	United States	13335	CLOUDFLARENETUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.6.17.91	unknown	United States	14618	AMAZON-AESUS	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
3.120.103.140	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.67.36.125	p1.zemanta.com	United States	13335	CLOUDFLARENETUS	false
51.178.195.216	unknown	France	16276	OVHFR	false
152.199.21.175	sni1gl.wpc.deltacdn.net	United States	15133	EDGECASTUS	false
52.21.56.231	q.quora.com	United States	14618	AMAZON-AESUS	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
104.18.31.133	partnerlinks.io	United States	13335	CLOUDFLARENETUS	false
20.75.114.39	srm.af.contentsquare.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.254.135.1	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.159.3.140	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.6.133.169	us-global-accelerator-canary.freshsales.io	United States	14618	AMAZON-AESUS	false
216.58.206.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
142.250.185.166	ad.doubleclick.net	United States	15169	GOOGLEUS	false
108.156.2.91	lantern.roeyecdn.com	United States	16509	AMAZON-02US	false
216.200.232.253	unknown	United States	30419	MEDIAMATH-INCUS	false
151.101.194.217	js.sentry-cdn.com	United States	54113	FASTLYUS	false
52.216.54.200	s3.amazonaws.com	United States	16509	AMAZON-02US	false
18.66.122.128	unknown	United States	3	MIT-GATEWAYSUS	false
143.204.215.109	d2pbcviywxotf2.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.35.242	cdn3.optimizely.com	United States	13335	CLOUDFLARENETUS	false
13.32.121.29	d36ufq1ap5wy15.cloudfront.net	United States	16509	AMAZON-02US	false
104.16.79.73	unknown	United States	13335	CLOUDFLARENETUS	false
34.255.184.37	unknown	United States	16509	AMAZON-02US	false
104.22.7.45	js-tag.zemanta.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
18.66.122.111	fw-cdn.com	United States	3	MIT-GATEWAYSUS	false
104.18.10.212	unknown	United States	13335	CLOUDFLARENETUS	false
216.200.232.249	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
108.157.142.26	www.freshworks.com	United States	16509	AMAZON-02US	false
44.195.182.155	unknown	United States	14618	AMAZON-AESUS	false
151.101.2.217	browser.sentry-cdn.com	United States	54113	FASTLYUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
18.173.205.116	d2rpa84eq2akk3.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.67.166.202	cdn.popt.in	United States	13335	CLOUDFLARENETUS	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
142.250.185.98	unknown	United States	15169	GOOGLEUS	false
108.177.15.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
76.223.64.65	unknown	United States	16509	AMAZON-02US	false
35.204.158.49	um.simpli.fi	United States	15169	GOOGLEUS	false
18.66.102.127	unknown	United States	3	MIT-GATEWAYSUS	false
18.239.18.64	t.contentsquare.net	United States	16509	AMAZON-02US	false
91.134.110.137	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
18.244.18.49	detgh1asa1dg4.cloudfront.net	United States	16509	AMAZON-02US	false
13.35.58.106	d952cmcgwqsjf.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.32.137	cdn-ukwest.onetrust.com	United States	13335	CLOUDFLARENETUS	false
35.234.162.151	unknown	United States	15169	GOOGLEUS	false
66.102.1.156	unknown	United States	15169	GOOGLEUS	false
52.207.159.248	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.49.241.189	logx.optimizely.com	United States	2686	ATGS-MMD-ASUS	false
18.173.205.127	tag-logger.demandbase.com	United States	3	MIT-GATEWAYSUS	false
142.250.184.227	www.recaptcha.net	United States	15169	GOOGLEUS	false
34.225.64.228	marketplace-us.freshworks.com	United States	14618	AMAZON-AESUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
104.18.65.57	cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
67.202.18.49	src.fwusercontent.com	United States	14618	AMAZON-AESUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
142.250.184.194	adservice.google.com	United States	15169	GOOGLEUS	false
104.18.30.133	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.2.70	snippet.growsumo.com	United States	13335	CLOUDFLARENETUS	false
20.85.27.251	dep-malka.af.contentsquare.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.59.0.233	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
3.222.143.100	unknown	United States	14618	AMAZON-AESUS	false
18.66.112.92	unknown	United States	3	MIT-GATEWAYSUS	false
104.21.50.204	display.popt.in	United States	13335	CLOUDFLARENETUS	false
13.227.219.72	unknown	United States	16509	AMAZON-02US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1496478
Start date and time:	2024-08-21 10:56:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@30/524@428/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://lvltechnologies.freshdesk.com/support/solutions/folders/153000699383 Browse: https://lvltechnologies.freshdesk.com/support/solutions Browse: https://lvltechnologies.freshdesk.com/support/solutions/153000271888 Browse: https://lvltechnologies.freshdesk.com/support/tickets/new Browse: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink

Input	Output
URL: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 Model: jbxai	{ "brand":"lwl", "curiosity":true, "prominent_button_name":"PDF Online Ansehen", "text_input_field_labels":["Was this article helpful? No", "Yes"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

URL: https://lvltechnologies.freshdesk.com/support/solutions/folders/153000699383 Model: jbxai	{ "brand":"LVL technologies", "curiosity":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

URL: https://lvltechnologies.freshdesk.com/support/solutions/153000271888 Model: jbxai	{ "brand":"LVL technologies", "curiosity":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

URL: https://lvltechnologies.freshdesk.com/support/solutions Model: jbxai	{ "brand":"LVL technologies", "curiosity":false, "prominent_button_name":"Submit a ticket", "text_input_field_labels":["Knowledge base", "General (1)"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

URL: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink Model: jbxai	{ "brand":"freshworks", "curiosity":true, "prominent_button_name":"Try it Free", "text_input_field_labels":["Manager", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

URL: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink Model: jbxai	{ "brand":"freshworks", "curiosity":true, "prominent_button_name":"Try it Free", "text_input_field_labels":["Manager"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

URL: https://lvltechnologies.freshdesk.com/support/tickets/new Model: jbxai	{ "brand":"LVL technologies", "curiosity":true, "prominent_button_name":"Submit a ticket", "text_input_field_labels":["What brings you here?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

URL: https://9303576.fls.doubleclick.net/activityi;dc_pre=CKS0koHchYgDFXBeHQkd678xsw;src=9303576;type=anypage;cat=fresh0;ord=1;num=9682001941505;npa=0;auiddc=1174889448.1724230723;u1=undefined;u3=GA1.1.803042408.1724230724;u4=null;u5=null;u6=null;u7=NULL;u9=ht Model: jbxai	{ "brand":"freshworks", "curiosity":true, "prominent_button_name":"Try it Free", "text_input_field_labels":["Manager"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

URL: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink Model: jbxai	{ "brand":"freshworks", "curiosity":true, "prominent_button_name":"Try it Free", "text_input_field_labels":["Manager"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 21 07:57:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9781571962067153
Encrypted:	false
SSDEEP:	48:8YdBTpFxHUZidAKZdA19ehwiZUklqehly+3:8ybSr+y
MD5:	3050A4FC8559837479414C78277F4508
SHA1:	68D54C78494AA7D42F413FE23F6526AB00AC563B
SHA-256:	4AC8BCA5AC79EC8A9A0EC2648E96E8B349E0CA115E8DEB8352FFCAFAB913685A
SHA-512:	4855CF30DECE413C1DAECF376E9B61304FDA3976F661CC1E6F1C73BE8B00DE9D29436236DD9E243E0C34B826D6DD110469F100D8768B114CCA3C7B0B943DF9BA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......0....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y5G....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y5G....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y5G....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y5G..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y7G...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............r.z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:45 UTC	760	OUT	GET /en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-21 08:57:45 UTC	6169	IN	HTTP/1.1 302 Found Date: Wed, 21 Aug 2024 08:57:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 302 Found Cache-Control: no-cache X-Ratelimit-Limit: 300 X-Ratelimit-Reset: 210824085845 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ratelimit-Remaining: 299 X-Xss-Protection: 1; mode=block X-Request-Id: fd5f7e59-94ce-439e-8a28-dd19160cd18b Location: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] Set-Cookie: _x_w=45_1; path=/; HttpOnly; secure Set-Cookie: _x_m=x_c; path=/; HttpOnly; secure X-Fw-Ratelimiting-Managed: true X-Ratelimit-Total: 200 X-Ratelimit-Remaining: 199 X-Ratelimit-Used-Currentrequest: 1 X-Envoy-Upstream-Service-Time: 43 X-Trace-Id: 00-4778745ed25c481635c927c6ccf614aa-71e7a7abb49ade28-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:45 UTC	195	IN	Data Raw: 62 64 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 76 6c 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2e 66 72 65 73 68 64 65 73 6b 2e 63 6f 6d 2f 73 75 70 70 6f 72 74 2f 73 6f 6c 75 74 69 6f 6e 73 2f 61 72 74 69 63 6c 65 73 2f 31 35 33 30 30 30 31 39 35 38 37 30 2d 61 75 66 74 72 61 67 73 62 65 73 74 25 43 33 25 41 34 74 69 67 75 6e 67 2d 33 31 33 39 35 2d 76 6f 6d 2d 31 34 2d 30 38 2d 32 30 32 34 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: bd<html><body>You are being <a href="https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024">redirected</a>.</body></html>
2024-08-21 08:57:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Windows Analysis Report
https://lvltechnologies.freshdesk.com/en/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:45 UTC	786	OUT	GET /support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:46 UTC	1043	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate X-Ratelimit-Limit: 300 X-Ratelimit-Reset: 210824085845 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ratelimit-Remaining: 299 X-Xss-Protection: 1; mode=block X-Request-Id: 64000b92-e002-465d-9f2c-01dc635a4516 Etag: W/"cf5f73955030dede2b3d3e6d8696eec5" X-Content-Type-Options: nosniff X-Fw-Ratelimiting-Managed: true X-Ratelimit-Total: 200 X-Ratelimit-Remaining: 198 X-Ratelimit-Used-Currentrequest: 1 X-Envoy-Upstream-Service-Time: 54 X-Trace-Id: 00-bcc83ece1ecd6399cf32409690fb9be7-4b5d1f9c4a9d22ec-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:46 UTC	15341	IN	Data Raw: 33 63 61 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 70 61 72 61 6d 22 20 63 6f 6e 74 65 6e 74 3d 22 61 75 74 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 44 4d 6e 7a 30 42 58 50 46 67 78 4c 4a 49 71 67 31 30 33 75 34 73 4a 67 30 4b 44 Data Ascii: 3ca5<!DOCTYPE html><html lang="en" data-date-format="non_us" dir="ltr"><head> <meta name="robots" content="noindex, nofollow"> <meta name="csrf-param" content="authenticity_token" /><meta name="csrf-token" content="DMnz0BXPFgxLJIqg103u4sJg0KD
2024-08-21 08:57:46 UTC	192	IN	Data Raw: 2f 31 35 33 30 32 33 30 34 35 38 37 35 2f 6f 72 69 67 69 6e 61 6c 2f 68 45 41 55 4c 43 5f 53 55 48 31 55 36 36 72 75 6c 4f 67 31 6b 33 36 45 64 36 72 4f 47 5a 62 63 59 77 2e 70 6e 67 3f 31 37 32 33 37 31 30 32 38 35 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 32 32 30 70 78 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 22 20 63 6c 61 73 73 3d 22 66 72 2d 66 69 6c 20 66 72 2d 64 69 62 22 20 64 61 74 61 2d 61 74 74 61 63 68 6d 65 6e 74 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 20 64 61 74 61 2d 69 64 3d 22 31 35 33 30 32 33 30 34 35 38 37 35 0d 0a Data Ascii: /153023045875/original/hEAULC_SUH1U66rulOg1k36Ed6rOGZbcYw.png?1723710285" style="width: 220px; max-width: 100%;" class="fr-fil fr-dib" data-attachment="[object Object]" data-id="153023045875
2024-08-21 08:57:46 UTC	16384	IN	Data Raw: 37 66 65 61 0d 0a 22 3e 3c 2f 70 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 72 2d 76 69 65 77 20 63 6f 6c 6c 61 62 2d 61 6e 6e 6f 74 61 74 61 62 6c 65 22 20 64 61 74 61 2d 74 65 73 74 2d 69 64 3d 22 61 72 74 69 63 6c 65 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 68 31 20 64 69 72 3d 22 6c 74 72 22 3e 3c 62 72 3e 3c 2f 68 31 3e 3c 68 31 20 64 69 72 3d 22 6c 74 72 22 3e 3c 73 74 72 6f 6e 67 20 64 69 72 3d 22 6c 74 72 22 3e 44 6f 6c 6f 72 65 73 20 54 68 65 69 6d 65 72 20 68 61 74 20 65 69 6e 20 44 6f 6b 75 6d 65 6e 74 20 c3 bc 62 65 72 20 4f 6e 65 44 72 69 76 65 20 67 65 74 65 69 6c 74 3c 2f 73 74 72 Data Ascii: 7fea"></p><p><span class="fr-view collab-annotatable" data-test-id="article-description" style="cursor: auto; display: block;"></span></p><h1 dir="ltr"><br></h1><h1 dir="ltr"><strong dir="ltr">Dolores Theimer hat ein Dokument ber OneDrive geteilt</str
2024-08-21 08:57:46 UTC	16370	IN	Data Raw: 6b 75 68 6c 62 58 64 51 33 33 42 50 32 37 62 62 77 75 4b 71 37 32 62 71 6e 38 72 6c 38 72 56 45 56 4f 63 39 54 6b 54 6a 45 54 4e 4f 2f 61 4a 6d 32 41 77 79 42 6a 4c 44 58 74 68 4d 6d 4f 36 53 4a 55 73 57 41 77 58 58 63 5a 79 47 4f 42 6e 4d 2f 4a 2f 6f 47 6d 41 52 49 36 57 63 7a 49 2f 61 6a 79 50 52 35 6e 4c 33 4c 33 76 32 59 63 79 4c 44 54 32 55 57 37 39 73 66 39 72 76 78 70 48 71 50 42 45 76 33 66 4f 38 62 62 54 57 78 37 75 75 2b 31 4d 68 78 50 39 57 79 31 71 34 33 75 2b 36 4c 71 79 41 32 6b 37 4d 58 4d 50 43 69 6e 59 53 59 48 61 64 52 30 52 76 59 2b 5a 33 45 64 48 70 78 70 68 6d 34 35 30 61 78 76 36 4b 39 6a 6c 54 6e 71 48 54 38 6e 32 2f 44 71 62 47 56 4a 45 54 5a 38 6f 69 5a 76 67 38 4d 77 59 79 77 31 2f 67 64 4a 74 2b 6f 56 44 59 62 33 52 30 39 46 46 Data Ascii: kuhlbXdQ33BP27bbwuKq72bqn8rl8rVEVOc9TkTjETNO/aJm2AwyBjLDXthMmO6SJUsWAwXXcZyGOBnM/J/oGmARI6WczI/ajyPR5nL3L3v2YcyLDT2UW79sf9rvxpHqPBEv3fO8bbTWx7uu+1MhxP9Wy1q43u+6LqyA2k7MXMPCinYSYHadR0RvY+Z3EdHpxphm450axv6K9jlTnqHT8n2/DqbGVJETZ8oiZvg8MwYyw1/gdJt+oVDYb3R09FF
2024-08-21 08:57:46 UTC	4611	IN	Data Raw: 31 31 66 62 0d 0a 30 67 4a 56 41 56 77 49 32 4a 42 6d 4e 75 72 4e 75 69 4b 69 54 6e 33 4d 65 64 47 69 52 57 38 31 78 71 51 47 79 30 47 38 63 73 78 37 75 73 6c 36 6d 39 45 4a 35 62 37 76 51 2f 66 52 63 50 70 41 47 54 4d 44 7a 75 52 76 51 6f 67 66 65 5a 35 58 77 34 53 79 62 58 74 33 49 51 51 43 6d 68 32 47 6b 4b 61 65 35 31 33 6a 65 64 37 2b 38 4d 49 6e 45 74 78 37 31 4e 55 6e 57 6b 4c 67 46 50 6d 63 6e 6f 54 6f 42 74 72 76 78 6b 51 49 6a 46 62 6d 32 59 6b 36 6c 6d 58 42 38 69 70 32 72 65 68 66 53 76 6d 37 79 62 4b 71 36 63 52 36 57 75 30 6a 51 4f 70 4f 77 33 36 71 64 6e 56 54 6e 4f 39 48 74 54 44 70 57 69 71 56 33 73 6e 4d 72 53 69 6d 7a 77 46 63 2f 78 69 73 4b 4a 4f 47 37 45 51 2b 4e 6a 52 48 49 39 78 43 43 35 33 42 48 77 54 51 51 6f 66 44 30 4b 61 46 2b Data Ascii: 11fb0gJVAVwI2JBmNurNuiKiTn3MedGiRW81xqQGy0G8csx7usl6m9EJ5b7vQ/fRcPpAGTMDzuRvQogfeZ5Xw4SybXt3IQQCmh2GkKae513jed7+8MInEtx71NUnWkLgFPmcnoToBtrvxkQIjFbm2Yk6lmXB8ip2rehfSvm7ybKq6cR6Wu0jQOpOw36qdnVTnO9HtTDpWiqV3snMrSimzwFc/xisKJOG7EQ+NjRHI9xCC53BHwTQQofD0KaF+
2024-08-21 08:57:46 UTC	16384	IN	Data Raw: 34 35 64 63 0d 0a 4f 39 65 4d 4c 4d 5a 41 6a 68 46 44 6f 44 67 6a 47 52 50 51 39 2b 49 65 34 72 67 75 4c 71 6d 6e 6e 76 61 32 55 67 68 55 64 45 47 45 54 45 35 68 36 73 56 6a 45 2f 38 79 30 4f 6a 6b 6c 54 6e 69 4d 42 55 6f 70 2b 44 55 31 62 47 62 43 33 62 51 43 48 6f 6e 67 62 73 61 59 4c 79 44 32 53 37 68 74 39 58 37 37 54 65 65 74 75 76 36 7a 4c 36 33 6f 50 39 61 58 7a 46 4e 62 76 76 65 4f 54 55 62 4c 33 4f 6f 33 36 4e 36 2b 76 72 34 39 6e 33 37 36 36 58 57 4f 34 2b 78 6e 6a 50 6c 4b 57 71 6a 68 36 70 69 68 36 38 33 47 6d 50 64 31 71 78 46 45 61 4a 32 56 32 34 36 4b 73 49 77 78 31 7a 41 7a 6e 4f 43 6d 63 38 4c 4f 35 57 54 58 64 63 2f 66 61 4b 4f 4e 35 6f 32 4d 6a 43 41 32 4d 73 78 6c 6f 64 79 62 45 4b 59 43 53 41 59 34 2f 43 55 52 42 54 41 63 76 75 38 44 Data Ascii: 45dcO9eMLMZAjhFDoDgjGRPQ9+Ie4rguLqmnnva2UghUdEGETE5h6sVjE/8y0OjklTniMBUop+DU1bGbC3bQCHongbsaYLyD2S7ht9X77Teetuv6zL63oP9aXzFNbvveOTUbL3Oo36N6+vr49n3766XWO4+xnjPlKWqjh6pih683GmPd1qxFEaJ2V246KsIwx1zAznOCmc8LO5WTXdc/faKON5o2MjCA2MsxlodybEKYCSAY4/CURBTAcvu8D
2024-08-21 08:57:46 UTC	1508	IN	Data Raw: 39 74 4f 49 47 57 58 61 4f 75 76 77 46 44 74 55 73 72 76 6c 35 6a 70 33 34 4c 42 34 46 72 47 70 51 72 72 72 57 34 4f 6d 42 6c 51 75 49 66 44 34 66 42 52 4d 30 54 4c 2b 77 53 67 41 4f 4c 58 53 2f 54 70 6e 44 58 37 68 4a 30 42 36 4f 38 6f 78 52 50 67 6a 56 63 45 37 52 48 62 5a 63 38 64 43 47 6a 6f 46 4d 72 4f 31 46 64 64 6f 73 31 75 59 4d 56 2f 68 59 6b 2b 37 48 38 70 56 69 68 61 72 62 43 74 65 7a 56 47 51 73 59 4f 35 65 48 47 48 34 37 52 31 61 6e 65 71 6b 34 34 73 6b 66 47 6f 72 2f 72 57 70 78 34 50 4c 6f 39 41 6a 6a 43 63 37 68 54 55 46 79 4b 41 74 56 49 48 4c 59 76 4c 74 6d 71 63 70 4a 45 74 4b 7a 45 6a 43 70 68 49 42 35 64 31 2b 38 6b 49 6c 63 39 49 56 76 50 73 57 6e 39 59 46 6d 6a 31 65 73 45 67 6e 36 2f 66 37 49 51 59 68 63 69 32 70 36 78 58 46 69 78 Data Ascii: 9tOIGWXaOuvwFDtUsrvl5jp34LB4FrGpQrrrW4OmBlQuIfD4fBRM0TL+wSgAOLXS/TpnDX7hJ0B6O8oxRPgjVcE7RHbZc8dCGjoFMrO1Fddos1uYMV/hYk+7H8pViharbCtezVGQsYO5eHGH47R1aneqk44skfGor/rWpx4PLo9AjjCc7hTUFyKAtVIHLYvLtmqcpJEtKzEjCphIB5d1+8kIlc9IVvPsWn9YFmj1esEgn6/f7IQYhci2p6xXFix
2024-08-21 08:57:46 UTC	8951	IN	Data Raw: 32 32 65 66 0d 0a 68 78 45 4e 45 35 47 71 71 6d 35 37 64 4e 61 46 51 69 4f 4f 65 44 30 6d 71 36 41 53 69 36 33 71 62 6c 50 4a 35 6a 67 46 52 44 36 72 59 63 73 41 77 6a 42 2f 58 6f 36 39 74 66 64 53 30 41 71 79 38 35 66 6a 6a 52 64 2b 2f 45 49 49 44 79 2b 54 5a 69 72 4f 74 65 58 74 37 65 39 6b 59 32 30 51 30 69 34 67 2b 42 77 42 73 62 6c 72 4a 35 69 54 58 65 73 6f 6e 70 55 7a 46 58 4d 63 54 48 2b 67 70 4e 79 76 46 42 67 35 30 4e 57 6f 53 45 55 6a 76 57 57 32 49 4c 53 58 42 69 63 76 4f 67 36 7a 71 55 47 2f 7a 4f 6c 51 67 37 44 75 72 74 62 76 68 38 39 55 78 44 32 59 36 69 53 64 36 35 73 64 2b 48 78 78 50 53 53 72 45 52 73 73 62 59 67 2f 56 6a 38 6b 41 41 43 41 41 53 55 52 42 56 44 41 65 69 48 42 48 6a 75 38 79 47 48 32 50 70 44 37 44 34 66 43 7a 41 50 43 64 Data Ascii: 22efhxENE5Gqqm57dNaFQiOOeD0mq6ASi63qblPJ5jgFRD6rYcsAwjB/Xo69tfdS0Aqy85fjjRd+/EIIDy+TZirOteXt7e9kY20Q0i4g+BwBsblrJ5iTXesonpUzFXMcTH+gpNyvFBg50NWoSEUjvWW2ILSXBicvOg6zqUG/zOlQg7Durtbvh89UxD2Y6iSd65sd+HxxPSSrERssbYg/Vj8kAACAASURBVDAeiHBHju8yGH2PpD7D4fCzAPCd
2024-08-21 08:57:46 UTC	7433	IN	Data Raw: 31 34 0d 0a 33 2b 52 6d 4d 7a 6a 4e 50 76 41 6f 48 41 33 6b 52 55 4b 62 0d 0a 32 32 65 66 0d 0a 41 6e 6d 38 62 2f 4d 42 77 4f 58 37 48 6c 4c 5a 47 6c 65 71 75 37 32 63 5a 41 53 6e 79 6c 4c 2f 70 50 33 30 75 69 75 41 2b 42 74 71 2f 46 48 77 47 4a 58 6c 46 62 6b 78 64 6c 6d 41 77 50 59 66 64 72 4c 53 57 47 71 6a 6f 72 49 65 57 4b 74 78 51 7a 62 2f 73 2f 51 54 61 73 76 52 45 4f 4a 45 31 52 69 71 4b 32 6b 61 54 4f 76 39 44 53 74 2f 2b 6a 72 47 53 72 71 6c 51 53 53 4a 31 58 48 32 51 77 79 6d 67 32 32 52 59 2b 2b 4e 48 38 6e 65 59 41 6f 76 34 59 72 6b 36 5a 6b 7a 61 51 73 6c 44 67 46 67 43 37 68 67 6e 4a 2b 45 55 6e 54 6a 67 31 5a 54 55 30 31 67 34 43 78 72 6f 2b 2b 6c 76 7a 65 4b 70 34 37 35 77 64 72 75 52 4e 71 79 39 65 31 6f 79 31 5a 45 4f 33 7a 45 61 78 55 Data Ascii: 143+RmMzjNPvAoHA3kRUKb22efAnm8b/MBwOX7HlLZGlequ72cZASnylL/pP30uiuA+Btq/FHwGJXlFbkxdlmAwPYfdrLSWGqjorIeWKtxQzb/s/QTasvREOJE1RiqK2kaTOv9DSt/+jrGSrqlQSSJ1XH2Qwymg22RY++NH8neYAov4Yrk6ZkzaQslDgFgC7hgnJ+EUnTjg1ZTU01g4Cxro++lvzeKp475wdruRNqy9e1oy1ZEO3zEaxU
2024-08-21 08:57:46 UTC	16384	IN	Data Raw: 46 45 66 32 5a 2f 2b 4a 4f 78 41 55 63 47 47 57 79 62 6f 4e 75 6a 2f 53 41 51 36 4d 5a 6c 34 5a 69 77 53 53 64 56 79 44 36 72 4a 2b 70 35 32 54 4f 6e 49 70 37 58 37 35 6b 72 4c 69 43 32 43 35 76 42 52 59 6a 50 50 72 34 4f 4f 69 4c 38 35 37 41 41 41 4c 65 51 64 50 54 49 33 75 62 71 53 4a 4c 6e 46 33 4e 66 30 64 63 79 53 59 6a 58 41 4c 48 6c 47 73 64 6d 4d 76 38 72 37 58 66 4d 62 42 44 45 42 63 4d 62 70 64 33 46 48 46 52 56 43 63 77 39 70 2b 4b 4f 66 78 6e 79 6d 4e 64 58 78 43 2f 32 76 32 54 35 65 35 6a 4f 65 48 39 54 68 43 51 49 34 34 48 4e 36 71 49 33 30 5a 67 4b 43 44 72 41 34 52 37 55 69 63 70 4d 47 33 69 52 6e 49 61 39 79 4b 70 35 64 6d 65 4f 62 75 6e 2f 34 58 57 34 35 33 33 39 53 55 4a 43 4b 39 58 31 68 68 39 72 38 6b 55 2f 6b 59 34 5a 50 78 55 74 6e Data Ascii: FEf2Z/+JOxAUcGGWyboNuj/SAQ6MZl4ZiwSSdVyD6rJ+p52TOnIp7X75krLiC2C5vBRYjPPr4OOiL857AAALeQdPTI3ubqSJLnF3Nf0dcySYjXALHlGsdmMv8r7XfMbBDEBcMbpd3FHFRVCcw9p+KOfxnymNdXxC/2v2T5e5jOeH9ThCQI44HN6qI30ZgKCDrA4R7UicpMG3iRnIa9yKp5dmeObun/4XW45339SUJCK9X1hh9r8kU/kY4ZPxUtn

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:46 UTC	705	OUT	GET /assets/cdn/portal/styles/theme.css HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:46 UTC	5803	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:46 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1128523 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: f14ee664-fab4-4bae-9cd4-f3184323043e Etag: "9c1f7fea60d44e3d54d7648325392596a3174a85c9efd67691359d2fe52c889f" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 26 X-Trace-Id: 00-4036090e95066e008a3175e0550fc9dd-716b9050e889394f-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:46 UTC	10581	IN	Data Raw: ef bb bf 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 6d 61 69 6e 7b 64 69 73 70 Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{display:-webkit-box;display:-ms-flexbox;display:flex;flex-direction:column;height:100vh;word-break:break-word}main{disp
2024-08-21 08:57:46 UTC	1533	IN	Data Raw: 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 35 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 39 36 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 Data Ascii: ,.container-sm{max-width:540px}}@media (min-width: 768px){.container,.container-md,.container-sm{max-width:720px}}@media (min-width: 992px){.container,.container-lg,.container-md,.container-sm{max-width:960px}}@media (min-width: 1200px){.container,.contai
2024-08-21 08:57:46 UTC	16384	IN	Data Raw: 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 31 32 2c 2e 66 77 2d 68 65 6c 70 64 65 73 6b 2d 74 69 63 6b 65 74 2d 66 6f 72 6d 73 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 Data Ascii: x:0 0 auto;width:83.33333333%}.col-11{flex:0 0 auto;width:91.66666667%}.col-12,.fw-helpdesk-ticket-forms-dropdown-container .form-group{flex:0 0 auto;width:100%}.offset-1{margin-left:8.33333333%}.offset-2{margin-left:16.66666667%}.offset-3{margin-left:25%
2024-08-21 08:57:46 UTC	16384	IN	Data Raw: 67 75 74 74 65 72 2d 79 3a 36 72 65 6d 7d 2e 67 2d 6c 67 2d 31 30 30 2c 2e 67 78 2d 6c 67 2d 31 30 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 36 2e 32 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 30 30 2c 2e 67 79 2d 6c 67 2d 31 30 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 36 2e 32 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 30 34 2c 2e 67 78 2d 6c 67 2d 31 30 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 36 2e 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 30 34 2c 2e 67 79 2d 6c 67 2d 31 30 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 36 2e 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 30 38 2c 2e 67 78 2d 6c 67 2d 31 30 38 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 36 2e 37 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 30 38 2c 2e 67 79 2d 6c 67 2d 31 30 38 7b 2d 2d 62 73 2d 67 75 Data Ascii: gutter-y:6rem}.g-lg-100,.gx-lg-100{--bs-gutter-x:6.25rem}.g-lg-100,.gy-lg-100{--bs-gutter-y:6.25rem}.g-lg-104,.gx-lg-104{--bs-gutter-x:6.5rem}.g-lg-104,.gy-lg-104{--bs-gutter-y:6.5rem}.g-lg-108,.gx-lg-108{--bs-gutter-x:6.75rem}.g-lg-108,.gy-lg-108{--bs-gu
2024-08-21 08:57:46 UTC	3292	IN	Data Raw: 65 72 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 5b 72 65 61 64 6f 6e 6c 79 5d 29 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 65 30 65 33 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 2e 37 35 72 65 6d 20 31 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 37 35 72 65 6d 20 2d 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 31 72 65 6d 3b 63 6f 6c 6f 72 3a 23 31 32 33 34 34 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 20 Data Ascii: er:not(:disabled):not([readonly])::file-selector-button{background-color:#dde0e3}.form-control::-webkit-file-upload-button{padding:.75rem 1rem;margin:-.75rem -1rem;margin-inline-end:1rem;color:#12344d;background-color:#e9ecef;pointer-events:none;border:0
2024-08-21 08:57:47 UTC	16384	IN	Data Raw: 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 31 32 35 72 65 6d 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 2e 35 65 6d 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 31 65 6d 3b 68 65 69 67 68 74 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 32 35 65 6d 3b 76 65 72 Data Ascii: ing-bottom:.75rem;padding-left:1rem;font-size:1rem}.form-check{display:block;min-height:1.5rem;padding-left:1.5em;margin-bottom:.125rem}.form-check .form-check-input{float:left;margin-left:-1.5em}.form-check-input{width:1em;height:1em;margin-top:.25em;ver
2024-08-21 08:57:47 UTC	1514	IN	Data Raw: 6f 77 3e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 63 63 2d 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 65 32 61 33 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 65 32 37 33 61 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e Data Ascii: ow>.btn-primary.cc-dropdown-toggle,.show>.btn-primary.dropdown-toggle{color:#fff;background-color:#0e2a3e;border-color:#0e273a}.btn-check:active+.btn-primary:focus,.btn-check:checked+.btn-primary:focus,.btn-primary.active:focus,.btn-primary:active:focus,.
2024-08-21 08:57:47 UTC	8949	IN	Data Raw: 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 37 34 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 36 31 34 39 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 2b 2e 62 74 6e 2d 73 75 63 63 65 73 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 33 38 2c 31 34 31 2c 31 31 36 2c 30 2e 35 29 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 74 6e 2d 73 75 63 63 65 73 73 2c 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e 62 74 6e 2d 73 75 63 63 65 73 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d Data Ascii: .btn-success:hover{color:#fff;background-color:#00674d;border-color:#006149}.btn-check:focus+.btn-success,.btn-success:focus{box-shadow:0 0 0 2px rgba(38,141,116,0.5)}.btn-check:active+.btn-success,.btn-check:checked+.btn-success,.btn-success.active,.btn-
2024-08-21 08:57:47 UTC	7435	IN	Data Raw: 67 6c 65 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 73 68 6f 77 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c Data Ascii: gle,.btn-outline-light:active{color:#000;background-color:#fff;border-color:#fff}.btn-check:active+.btn-outline-light:focus,.btn-check:checked+.btn-outline-light:focus,.btn-outline-light.active:focus,.btn-outline-light.dropdown-toggle.show:focus,.btn-outl
2024-08-21 08:57:47 UTC	16384	IN	Data Raw: 31 32 30 30 70 78 29 7b 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 78 6c 2d 73 74 61 72 74 7b 2d 2d 62 73 2d 70 6f 73 69 74 69 6f 6e 3a 73 74 61 72 74 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 78 6c 2d 73 74 61 72 74 5b 64 61 74 61 2d 62 73 2d 70 6f 70 70 65 72 5d 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 30 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 78 6c 2d 65 6e 64 7b 2d 2d 62 73 2d 70 6f 73 69 74 69 6f 6e 3a 65 6e 64 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 78 6c 2d 65 6e 64 5b 64 61 74 61 2d 62 73 2d 70 6f 70 70 65 72 5d 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 34 30 30 70 78 29 7b 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 78 78 6c 2d 73 74 Data Ascii: 1200px){.dropdown-menu-xl-start{--bs-position:start}.dropdown-menu-xl-start[data-bs-popper]{right:auto;left:0}.dropdown-menu-xl-end{--bs-position:end}.dropdown-menu-xl-end[data-bs-popper]{right:0;left:auto}}@media (min-width: 1400px){.dropdown-menu-xxl-st

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:46 UTC	684	OUT	GET /assets/cdn/portal/vendor.js HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:46 UTC	5801	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:46 GMT Content-Type: application/javascript Content-Length: 924737 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: 176b9d3d-24b9-4b9e-8e80-6d8de9c15ecb Etag: "f4fded87ddf105cc608bc988d280d5c5811cfaf4c25cc7300dc7fbb2b944b55e" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 27 X-Trace-Id: 00-f3cceeca14bf46f82744d806c5b464f2-f8941c53867e3ace-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:46 UTC	3167	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 2c 6f 3d 74 5b 30 5d 2c 6c 3d 74 5b 31 5d 2c 63 3d 74 5b 32 5d 2c 75 3d 30 2c 66 3d 5b 5d 3b 75 3c 6f 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 3d 6f 5b 75 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 69 29 26 26 61 5b 69 5d 26 26 66 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 61 5b 69 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 72 29 26 26 28 65 5b 72 5d 3d 6c 5b 72 5d 29 3b 66 6f 72 28 64 26 26 64 28 74 29 3b 66 2e 6c 65 6e 67 74 68 3b 29 66 2e 73 68 Data Ascii: !function(e){function t(t){for(var r,i,o=t[0],l=t[1],c=t[2],u=0,f=[];u<o.length;u++)i=o[u],Object.prototype.hasOwnProperty.call(a,i)&&a[i]&&f.push(a[i][0]),a[i]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(d&&d(t);f.length;)f.sh
2024-08-21 08:57:46 UTC	7650	IN	Data Raw: 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 65 2e 65 78 70 6f 72 74 73 3d 6e 2c 65 2e 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 2e 65 78 70 6f 72 74 73 2c 65 2e 65 78 70 6f 72 74 73 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 29 7d 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 Data Ascii: rn t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}e.exports=n,e.exports["default"]=e.exports,e.exports.__esModule=!0},function(e,t,n){!function(t,n){e.exports=n()}(window,function(){return function(e){functi
2024-08-21 08:57:46 UTC	16384	IN	Data Raw: 6b 5d 3b 74 68 69 73 2e 5f 6c 6f 67 28 27 5c 6e 50 61 74 74 65 72 6e 3a 20 22 27 2e 63 6f 6e 63 61 74 28 5f 2e 70 61 74 74 65 72 6e 2c 27 22 27 29 29 3b 66 6f 72 28 76 61 72 20 53 3d 21 31 2c 4c 3d 30 3b 4c 3c 45 2e 6c 65 6e 67 74 68 3b 4c 2b 3d 31 29 7b 76 61 72 20 54 3d 45 5b 4c 5d 2c 78 3d 5f 2e 73 65 61 72 63 68 28 54 29 2c 41 3d 7b 7d 3b 78 2e 69 73 4d 61 74 63 68 3f 28 41 5b 54 5d 3d 78 2e 73 63 6f 72 65 2c 76 3d 21 30 2c 53 3d 21 30 2c 77 2e 70 75 73 68 28 78 2e 73 63 6f 72 65 29 29 3a 28 41 5b 54 5d 3d 31 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 74 63 68 41 6c 6c 54 6f 6b 65 6e 73 7c 7c 77 2e 70 75 73 68 28 31 29 29 2c 74 68 69 73 2e 5f 6c 6f 67 28 27 54 6f 6b 65 6e 3a 20 22 27 2e 63 6f 6e 63 61 74 28 54 2c 27 22 2c 20 73 63 6f 72 65 3a 20 Data Ascii: k];this._log('\nPattern: "'.concat(_.pattern,'"'));for(var S=!1,L=0;L<E.length;L+=1){var T=E[L],x=_.search(T),A={};x.isMatch?(A[T]=x.score,v=!0,S=!0,w.push(x.score)):(A[T]=1,this.options.matchAllTokens\|\|w.push(1)),this._log('Token: "'.concat(T,'", score:
2024-08-21 08:57:46 UTC	16384	IN	Data Raw: 6e 3a 72 2c 6f 3d 74 2e 76 61 6c 75 65 2c 61 3d 74 2e 6c 61 62 65 6c 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 6f 3a 61 3b 72 65 74 75 72 6e 20 69 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 73 2c 5b 5d 2c 7b 73 65 6e 73 69 74 69 76 69 74 79 3a 22 62 61 73 65 22 2c 69 67 6e 6f 72 65 50 75 6e 63 74 75 61 74 69 6f 6e 3a 21 30 2c 6e 75 6d 65 72 69 63 3a 21 30 7d 29 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 73 63 6f 72 65 2d 74 2e 73 63 6f 72 65 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 72 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 2c 7b 64 65 74 61 69 6c 3a 6e 2c 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 Data Ascii: n:r,o=t.value,a=t.label,s=void 0===a?o:a;return i.localeCompare(s,[],{sensitivity:"base",ignorePunctuation:!0,numeric:!0})},X=function(e,t){return e.score-t.score},Q=function(e,t,n){void 0===n&&(n=null);var r=new CustomEvent(t,{detail:n,bubbles:!0,cancela
2024-08-21 08:57:47 UTC	16384	IN	Data Raw: 65 44 69 73 61 62 6c 65 64 3d 22 22 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 22 74 72 75 65 22 29 29 3a 28 76 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6f 29 2c 76 2e 64 61 74 61 73 65 74 2e 63 68 6f 69 63 65 53 65 6c 65 63 74 61 62 6c 65 3d 22 22 29 2c 76 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 69 6e 70 75 74 2c 72 3d 65 2e 69 6e 70 75 74 43 6c 6f 6e 65 64 2c 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 7b 74 79 70 65 3a 22 74 65 78 74 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 2b 22 20 22 2b 72 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3a 22 6f 66 66 22 2c Data Ascii: eDisabled="",v.setAttribute("aria-disabled","true")):(v.classList.add(o),v.dataset.choiceSelectable=""),v},input:function(e,t){var n=e.input,r=e.inputCloned,i=Object.assign(document.createElement("input"),{type:"text",className:n+" "+r,autocomplete:"off",
2024-08-21 08:57:47 UTC	6309	IN	Data Raw: 6c 69 67 68 74 49 74 65 6d 28 74 2c 21 31 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 48 69 67 68 6c 69 67 68 74 65 64 49 74 65 6d 73 28 21 30 29 29 7d 7d 2c 74 2e 5f 73 74 61 72 74 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 73 74 6f 72 65 2e 64 69 73 70 61 74 63 68 28 44 65 28 21 30 29 29 7d 2c 74 2e 5f 73 74 6f 70 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 73 74 6f 72 65 2e 64 69 73 70 61 74 63 68 28 44 65 28 21 31 29 29 7d 2c 74 2e 5f 68 61 6e 64 6c 65 4c 6f 61 64 69 6e 67 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 30 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 69 74 65 6d 4c 69 73 74 2e 67 65 74 43 68 69 6c 64 28 22 2e 22 2b 74 68 69 73 2e Data Ascii: lightItem(t,!1),this.removeHighlightedItems(!0))}},t._startLoading=function(){this._store.dispatch(De(!0))},t._stopLoading=function(){this._store.dispatch(De(!1))},t._handleLoadingState=function(e){void 0===e&&(e=!0);var t=this.itemList.getChild("."+this.
2024-08-21 08:57:47 UTC	8949	IN	Data Raw: 6f 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 43 68 6f 69 63 65 41 63 74 69 6f 6e 28 72 2c 63 29 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 69 73 53 65 6c 65 63 74 4f 6e 65 45 6c 65 6d 65 6e 74 26 26 28 74 68 69 73 2e 73 68 6f 77 44 72 6f 70 64 6f 77 6e 28 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 2c 74 2e 5f 6f 6e 45 73 63 61 70 65 4b 65 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 68 61 73 41 63 74 69 76 65 44 72 6f 70 64 6f 77 6e 3b 74 26 26 28 74 68 69 73 2e 68 69 64 65 44 72 6f 70 64 6f 77 6e 28 21 30 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 4f 75 74 65 72 2e 66 6f 63 75 73 28 29 29 7d 2c 74 2e 5f 6f 6e 44 69 72 65 63 74 69 6f 6e 4b 65 79 3d 66 75 Data Ascii: o),this._handleChoiceAction(r,c)),t.preventDefault()}else this._isSelectOneElement&&(this.showDropdown(),t.preventDefault())},t._onEscapeKey=function(e){var t=e.hasActiveDropdown;t&&(this.hideDropdown(!0),this.containerOuter.focus())},t._onDirectionKey=fu
2024-08-21 08:57:47 UTC	7435	IN	Data Raw: 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 6e 65 72 2e 65 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 69 74 65 6d 4c 69 73 74 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 69 73 54 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 65 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 68 6f 69 63 65 4c 69 73 74 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 69 73 53 65 6c 65 63 74 4f 6e 65 45 6c 65 6d 65 6e 74 3f 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 65 61 72 63 68 45 6e 61 62 6c 65 64 26 26 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 65 6c 65 6d 65 6e 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 2e 69 6e 70 75 74 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 64 72 6f 70 64 Data Ascii: .containerInner.element.appendChild(this.itemList.element),this._isTextElement\|\|this.dropdown.element.appendChild(this.choiceList.element),this._isSelectOneElement?this.config.searchEnabled&&this.dropdown.element.insertBefore(this.input.element,this.dropd
2024-08-21 08:57:47 UTC	16384	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 2e 69 73 4f 62 6a 65 63 74 28 65 29 3f 6f 2e 66 6f 72 45 61 63 68 4b 65 79 49 6e 4b 65 79 70 61 74 68 28 65 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 2e 69 73 4f 62 6a 65 63 74 28 65 29 3f 65 5b 74 5d 3a 76 6f 69 64 20 30 7d 29 3a 76 6f 69 64 20 30 7d 2c 63 6f 6c 6c 65 63 74 46 6f 72 6d 56 61 6c 75 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 61 2c 73 2c 6c 2c 63 3d 7b 7d 3b 69 66 28 6f 2e 69 73 4a 71 75 65 72 79 45 6c 65 6d 65 6e 74 28 65 29 26 26 28 65 3d 65 5b 30 5d 29 2c 21 65 29 72 65 74 75 72 6e 20 63 3b 66 6f 72 28 74 3d 74 7c 7c 7b 7d 2c 61 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 6e 70 75 74 5b 6e 61 6d 65 Data Ascii: on(e,t){return o.isObject(e)?o.forEachKeyInKeypath(e,t,function(e,t){return o.isObject(e)?e[t]:void 0}):void 0},collectFormValues:function(e,t){var n,r,i,a,s,l,c={};if(o.isJqueryElement(e)&&(e=e[0]),!e)return c;for(t=t\|\|{},a=e.querySelectorAll("input[name
2024-08-21 08:57:47 UTC	8949	IN	Data Raw: 29 7b 76 61 72 20 74 3d 22 63 6c 61 73 73 4c 69 73 74 22 2c 6e 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 72 3d 65 2e 45 6c 65 6d 65 6e 74 5b 6e 5d 2c 69 3d 4f 62 6a 65 63 74 2c 6f 3d 53 74 72 69 6e 67 5b 6e 5d 2e 74 72 69 6d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 7d 2c 61 3d 41 72 72 61 79 5b 6e 5d 2e 69 6e 64 65 78 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 6e 3e 74 3b 74 2b 2b 29 69 66 28 74 20 69 6e 20 74 68 69 73 26 26 74 68 69 73 5b 74 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 Data Ascii: ){var t="classList",n="prototype",r=e.Element[n],i=Object,o=String[n].trim\|\|function(){return this.replace(/^\s+\|\s+$/g,"")},a=Array[n].indexOf\|\|function(e){for(var t=0,n=this.length;n>t;t++)if(t in this&&this[t]===e)return t;return-1},s=function(e,t){thi

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:46 UTC	690	OUT	GET /assets/cdn/portal/scripts/head.js HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:46 UTC	5800	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:46 GMT Content-Type: application/javascript Content-Length: 22710 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: 51ac58b6-290f-4513-8280-ee5cb69a8e3c Etag: "10e1f420656792d6573bb07ee2eaad01cc717b1d21299f357de71af5c8c92420" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 24 X-Trace-Id: 00-5609cab01345fb7cdddeb5642ac5f91b-4086026cd76b89c1-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:46 UTC	10584	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{0:function(e,t,n){"use strict";function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDes
2024-08-21 08:57:46 UTC	12126	IN	Data Raw: 63 6b 28 65 2c 6e 2e 6c 6f 63 61 6c 65 2c 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3a 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 6f 3d 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 2c 7b 6d 65 73 73 61 67 65 3a 63 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3a 6f 7d 7d 2c 74 2e 6d 65 72 69 64 69 61 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 74 69 6d 65 22 29 2c 74 3d 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 64 61 74 65 22 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 6d 26 26 65 2e 70 6d 3f 5b 65 2e 61 6d 2c 65 2e 70 6d 5d 3a 74 26 26 74 2e 6d 65 72 69 64 69 61 6e 3f 74 2e 6d 65 72 69 64 69 61 6e 3a 67 2e 6d 65 72 69 64 69 61 6e 7d 2c 74 2e 70 72 65 70 61 72 65 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f Data Ascii: ck(e,n.locale,n.defaultValue):n.defaultValue,o=n.defaultValue),{message:c,translations:o}},t.meridian=function(){var e=this.lookup("time"),t=this.lookup("date");return e&&e.am&&e.pm?[e.am,e.pm]:t&&t.meridian?t.meridian:g.meridian},t.prepareOptions=functio

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:47 UTC	756	OUT	GET /assets/cdn/portal/images/no-results.png HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:47 UTC	5787	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:47 GMT Content-Type: image/png Content-Length: 15368 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: e479562e-0b8b-4285-8190-1df399b8124c Etag: "c9556946153ff9272046871bd9303a00fed5ee409d9f43f9447de610a97eb816" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 32 X-Trace-Id: 00-656d24d572f77a746dea61c8998d07fb-be861f4e5a8c08f0-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:47 UTC	3181	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ef 00 00 00 ed 08 06 00 00 00 57 b8 22 b2 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 3b 9d 49 44 41 54 78 01 ed 9d 0b 98 14 e5 95 f7 4f d5 00 c3 55 66 16 2f a8 28 33 9a e8 80 28 17 8d ee 0a 59 06 88 26 11 0d 0d ee 9a b8 1b 05 62 f6 59 b3 5f 22 a0 46 20 f9 84 c1 7c 2b 60 a2 80 c9 26 e6 79 12 01 31 71 cd 46 66 30 d1 4d 8c c0 f0 29 ae b7 c0 20 44 f0 82 34 17 05 44 33 33 ca 65 b8 4c bd fb fe ab fb ed 7e ab ba aa bb ba bb aa fa 32 ef ef 79 86 e9 ee e9 ae 19 ba eb 5f e7 bc e7 9c f7 1c 22 85 42 51 92 68 d4 95 89 2c ac e1 ff d6 50 c9 63 b4 51 d3 f7 5b 48 d1 a5 e8 5a e2 8d 2c ac d7 75 7d 2c 63 ac Data Ascii: PNGIHDRW"pHYs%%IR$sRGBgAMAa;IDATxOUf/(3(Y&bY_"F \|+`&y1qFf0M) D4D33eL~2y_"BQh,PcQ[HZ,u},c
2024-08-21 08:57:47 UTC	12187	IN	Data Raw: 5b 6b c9 bb 60 80 b1 88 b8 79 eb f8 61 a4 48 4f 5f 9e ef be 66 d4 05 a6 fb 0c f8 c5 75 3e 2b e3 29 88 c5 65 79 6d 6e e2 cd 63 2e a6 ff f8 97 09 54 28 20 66 58 e5 dc dd 6d 5b 30 2c 0b 77 5b 5e 3a 28 ab eb 9d 9d fb db e8 f6 9f fc 21 71 bf 9c ad 6f 51 59 5e 6e bf ea e5 19 ee b3 27 7b 1f 22 1d 04 c2 3a 5f c7 af e6 82 8d 5c c0 39 07 c3 a8 27 b1 c9 0b 3d e5 9e 99 d4 f1 f2 c6 bf bb 98 14 de b8 f0 ec 2a 33 b0 27 fa 56 97 b3 f5 2d 2a cb 2b cf d9 45 64 f9 69 be d6 2d 76 ec c1 b0 37 b2 ee d3 2c 07 c3 30 a5 fe 44 73 05 55 46 e4 80 9d 4a 0f 65 07 84 7b f7 2f d6 25 ee 73 eb 5b 5b 8e 35 cf c5 63 79 23 0d 55 f2 4e 99 eb 46 95 46 a0 f0 7c 9e 6b c6 97 6c 9d 45 aa ea c5 ed ef 7b c8 3d b3 d8 ff 5b d3 ea 13 d6 59 fa a9 4a 0f 65 0f de 33 d9 fa ea 44 48 1b cd a4 a0 31 cb 77 bb Data Ascii: [k`yaHO_fu>+)eymnc.T( fXm[0,w[^:(!qoQY^n'{":_\9'=3'V-+Edi-v7,0DsUFJe{/%s[[5cy#UNFF\|klE{=[YJe3DH1w

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:47 UTC	715	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153023045875/original/hEAULC_SUH1U66rulOg1k36Ed6rOGZbcYw.png?1723710285 HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://lvltechnologies.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-21 08:57:47 UTC	504	IN	HTTP/1.1 200 OK x-amz-id-2: BX0o7EAXpHgMiS0KMjEDEO1dAj/bHnvyTx3m5Ws/IJAUHEnCnjXhjlnyri7dSn7GYI+wSgQUKLg= x-amz-request-id: 2DFK4EPDW8HFDG4W Date: Wed, 21 Aug 2024 08:57:48 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 15 Aug 2024 08:24:46 GMT ETag: "3ae5f4eabc492f7c1568cbf397c887fb" x-amz-server-side-encryption: AES256 x-amz-version-id: HuWCcWhTqMUlVgGJTnuhx18yhEiMJ5lm Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 20885 Connection: close
2024-08-21 08:57:47 UTC	8404	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 21 00 00 00 70 08 06 00 00 00 51 b8 c6 fd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 f2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 30 2d 63 30 30 30 20 37 39 2e 31 33 35 37 63 39 65 2c 20 32 30 32 31 2f 30 37 2f 31 34 2d 30 30 3a 33 39 3a 35 36 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR!pQpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.0-c000 79.1357c9e, 2021/07/14-00:39:56 "> <rdf:R
2024-08-21 08:57:47 UTC	9000	IN	Data Raw: 8d 45 93 40 13 09 20 a6 92 d4 aa 59 c0 46 71 4e e5 c6 d8 e8 e8 3f 76 ba f5 3d 43 aa 7a ac 88 84 fb cd 82 0a 12 50 fd 44 a7 bb 76 de 6b ca 6d 38 94 da 98 a6 36 ce c3 d7 9d 58 32 31 78 29 99 50 f9 fc 16 66 10 1a 05 43 89 4c 11 ab 74 40 6b 14 94 66 02 80 8a 90 8d e1 b3 81 7f 48 9a 55 95 4d fa 5d 84 53 23 00 72 f1 2f 03 5e 0c 54 2f 08 57 7b 20 a0 dc 06 fa fc 08 80 5c fc db 11 5e 8a c8 ef 82 d9 af 6e 86 8e c7 00 54 c6 57 6d 8c e4 c0 c7 83 3a 0b ea c3 81 b7 b9 1f 33 88 c0 29 6f e2 ce a3 4d 1e 00 8a e9 7f 05 d1 33 a0 ee 66 cb b2 af d8 4f 08 2f 44 e9 74 bb bf a7 78 29 5d a5 6b bf e5 7a ad 56 fd dc b9 67 0b b0 a7 a2 cf 49 45 13 78 75 7d 50 9b 64 8b 84 da 9b 5e 8a 4d 97 e4 4b de 0a 9d ec 49 11 d6 b8 08 6a df 96 1b b0 0c c9 64 6f 18 64 75 68 16 38 05 0d 28 f8 f3 52 Data Ascii: E@ YFqN?v=CzPDvkm86X21x)PfCLt@kfHUM]S#r/^T/W{ \^nTWm:3)oM3fO/Dtx)]kzVgIExu}Pd^MKIjdoduh8(R
2024-08-21 08:57:47 UTC	3481	IN	Data Raw: b1 85 11 a9 51 a3 9a 3e 7c 0b e5 d0 87 1a 00 01 a0 1c 5e 36 c1 e5 09 00 da 5e 44 de 0f 20 c2 39 29 00 2a ef fd ac a8 72 3d b2 99 65 5b 41 31 53 82 7e ac 60 40 dc 0e bc 2e 05 40 00 ad 56 7e 94 05 a0 2c cb f6 00 76 2b 97 e7 2f 56 d5 d3 62 00 02 50 d5 df 6b d5 5f 82 d5 5e 41 0e 52 74 08 04 45 7f 96 02 a0 32 dc 1f 4c 97 5b 62 ca be 02 68 97 dd f2 3a 81 be 0b 0c 0a e7 96 dd 70 05 c2 09 f6 5e 96 65 7b 82 ec 5a 9e c6 fd e3 9f 15 dd af f4 7b 9d 9a 02 20 80 3c 5f 73 85 20 3f 2f be 25 26 7f 15 95 e0 68 85 e5 c5 10 90 4f a7 f5 d3 3b 8b 49 98 fd 6b 37 a5 d8 06 a1 10 ac 40 8a f0 4a 45 8f 2a 8e e5 ed 31 00 01 b4 f2 fc f7 02 77 96 d5 77 b4 89 fb 28 11 59 5e 24 cf 2e f5 f2 e4 1f cb f3 bc 0b 6e c7 b4 89 e9 07 af 03 a7 da 3e 1a ea 83 3c 66 20 b1 bf 28 b5 44 ee c1 c7 00 56 Data Ascii: Q>\|^6^D 9)r=e[A1S~`@.@V~,v+/VbPk_^ARtE2L[bh:p^e{Z{ <_s ?/%&hO;Ik7@JE1ww(Y^$.n><f (DV

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:48 UTC	415	OUT	GET /assets/cdn/portal/scripts/head.js HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:48 UTC	5800	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:48 GMT Content-Type: application/javascript Content-Length: 22710 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: f5721827-baed-4187-88b5-0d670f612bb8 Etag: "cccc0fe063ddfce5f0c4206e4710074ab9f822b8309d60e8c79987561aefb3ca" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 27 X-Trace-Id: 00-018e854697b8afdc630c015e4fa8bd70-75f21619e5fac17e-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:48 UTC	10584	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{0:function(e,t,n){"use strict";function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDes
2024-08-21 08:57:48 UTC	12126	IN	Data Raw: 63 6b 28 65 2c 6e 2e 6c 6f 63 61 6c 65 2c 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3a 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 61 3d 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 2c 7b 6d 65 73 73 61 67 65 3a 63 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3a 61 7d 7d 2c 74 2e 6d 65 72 69 64 69 61 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 74 69 6d 65 22 29 2c 74 3d 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 64 61 74 65 22 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 6d 26 26 65 2e 70 6d 3f 5b 65 2e 61 6d 2c 65 2e 70 6d 5d 3a 74 26 26 74 2e 6d 65 72 69 64 69 61 6e 3f 74 2e 6d 65 72 69 64 69 61 6e 3a 67 2e 6d 65 72 69 64 69 61 6e 7d 2c 74 2e 70 72 65 70 61 72 65 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f Data Ascii: ck(e,n.locale,n.defaultValue):n.defaultValue,a=n.defaultValue),{message:c,translations:a}},t.meridian=function(){var e=this.lookup("time"),t=this.lookup("date");return e&&e.am&&e.pm?[e.am,e.pm]:t&&t.meridian?t.meridian:g.meridian},t.prepareOptions=functio

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:48 UTC	837	OUT	GET /support/recaptcha HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:48 UTC	1044	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate X-Ratelimit-Limit: 300 X-Ratelimit-Reset: 210824085848 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ratelimit-Remaining: 299 X-Xss-Protection: 1; mode=block X-Request-Id: 8254d2b5-b54e-4972-8100-6dd187fbc80b Etag: W/"1d0562c9d5cc0ada15376281a5a04e61" X-Content-Type-Options: nosniff X-Fw-Ratelimiting-Managed: true X-Ratelimit-Total: 1000 X-Ratelimit-Remaining: 999 X-Ratelimit-Used-Currentrequest: 1 X-Envoy-Upstream-Service-Time: 47 X-Trace-Id: 00-c477a74585018be27acfa145a15a46a4-bf5e017b89385e08-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:48 UTC	2994	IN	Data Raw: 62 61 62 0d 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 3e 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 2f 72 65 63 61 70 74 63 68 61 2f 65 6e 74 65 72 70 72 69 73 65 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 Data Ascii: bab<!DOCTYPE html><html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/></head><body> <div id="recaptcha"></div> <script src='https://www.recaptcha.net/recaptcha/enterprise.js'></script> <script ty
2024-08-21 08:57:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:49 UTC	806	OUT	GET /support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024/hit HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:49 UTC	1064	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:49 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: private X-Ratelimit-Limit: 300 X-Ratelimit-Reset: 210824085849 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ratelimit-Remaining: 299 X-Xss-Protection: 1; mode=block X-Request-Id: d9650ca0-f9be-43fd-9530-ae347325efae Content-Disposition: inline Content-Transfer-Encoding: binary Etag: W/"325472601571f31e1bf00674c368d335" X-Content-Type-Options: nosniff X-Fw-Ratelimiting-Managed: true X-Ratelimit-Total: 300 X-Ratelimit-Remaining: 299 X-Ratelimit-Used-Currentrequest: 1 X-Envoy-Upstream-Service-Time: 78 X-Trace-Id: 00-f3ebb008260bd2f2263daab5928ac5ac-fbd7c52f8cb90c5a-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:49 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-08-21 08:57:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-21 08:57:49 UTC	692	OUT	GET /assets/cdn/portal/scripts/bottom.js HTTP/1.1 Host: lvltechnologies.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lvltechnologies.freshdesk.com/support/solutions/articles/153000195870-auftragsbest%C3%A4tigung-31395-vom-14-08-2024 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _x_m=x_c
2024-08-21 08:57:49 UTC	5801	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 08:57:49 GMT Content-Type: application/javascript Content-Length: 123826 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: 116b4927-826e-46e6-a11f-9e8983f95bd3 Etag: "7e0d7d1992af6a66ac1e28fd99835c9e5b85e719bb9a38a71af8588f7d048df0" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 25 X-Trace-Id: 00-87062a88d053a34197e0209511ed9885-f4a5666b669814a8-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-08-21 08:57:49 UTC	10583	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[40],{0:function(e,t,n){"use strict";function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDes
2024-08-21 08:57:49 UTC	234	IN	Data Raw: 79 43 61 63 68 65 3a 28 24 28 65 29 2c 79 28 74 2c 69 2e 6c 6f 61 64 65 64 43 6c 61 73 73 29 2c 62 28 74 2c 69 2e 6c 6f 61 64 69 6e 67 43 6c 61 73 73 29 2c 77 28 74 2c 58 29 2c 76 6f 69 64 20 78 28 74 2c 22 6c 61 7a 79 6c 6f 61 64 65 64 22 29 29 7d 2c 4b 3d 54 28 47 29 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4b 28 7b 74 61 72 67 65 74 3a 65 2e 74 61 72 67 65 74 7d 29 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 6f 61 64 2d 6d 6f 64 65 22 29 7c 7c 69 2e 69 66 72 61 6d 65 4c 6f 61 64 4d 6f 64 65 3b 30 3d 3d 6e 3f 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c Data Ascii: yCache:($(e),y(t,i.loadedClass),b(t,i.loadingClass),w(t,X),void x(t,"lazyloaded"))},K=T(G),X=function(e){K({target:e.target})},Q=function(e,t){var n=e.getAttribute("data-load-mode")\|\|i.iframeLoadMode;0==n?e.contentWindow.location.repl
2024-08-21 08:57:49 UTC	16384	IN	Data Raw: 61 63 65 28 74 29 3a 31 3d 3d 6e 26 26 28 65 2e 73 72 63 3d 74 29 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 5b 63 5d 28 69 2e 73 72 63 73 65 74 41 74 74 72 29 3b 28 74 3d 69 2e 63 75 73 74 6f 6d 4d 65 64 69 61 5b 65 5b 63 5d 28 22 64 61 74 61 2d 6d 65 64 69 61 22 29 7c 7c 65 5b 63 5d 28 22 6d 65 64 69 61 22 29 5d 29 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 2c 74 29 2c 6e 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 73 65 74 22 2c 6e 29 7d 2c 65 65 3d 54 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 61 2c 73 2c 6c 2c 64 2c 66 2c 6d 3b 28 66 3d 78 28 65 2c 22 6c 61 7a 79 62 65 66 6f 72 65 75 6e 76 65 69 6c 22 2c 74 29 29 2e 64 65 66 61 75 6c 74 50 Data Ascii: ace(t):1==n&&(e.src=t)},Z=function(e){var t,n=e[c](i.srcsetAttr);(t=i.customMedia[e[c]("data-media")\|\|e[c]("media")])&&e.setAttribute("media",t),n&&e.setAttribute("srcset",n)},ee=T(function(e,t,n,r,o){var a,s,l,d,f,m;(f=x(e,"lazybeforeunveil",t)).defaultP
2024-08-21 08:57:49 UTC	16384	IN	Data Raw: 76 61 72 20 6e 3d 30 2c 72 3d 74 3f 6c 2e 74 77 65 65 6e 73 2e 6c 65 6e 67 74 68 3a 30 3b 69 66 28 69 29 72 65 74 75 72 6e 20 74 68 69 73 3b 66 6f 72 28 69 3d 21 30 3b 72 3e 6e 3b 6e 2b 2b 29 6c 2e 74 77 65 65 6e 73 5b 6e 5d 2e 72 75 6e 28 31 29 3b 72 65 74 75 72 6e 20 74 3f 28 73 2e 6e 6f 74 69 66 79 57 69 74 68 28 65 2c 5b 6c 2c 31 2c 30 5d 29 2c 73 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 65 2c 5b 6c 2c 74 5d 29 29 3a 73 2e 72 65 6a 65 63 74 57 69 74 68 28 65 2c 5b 6c 2c 74 5d 29 2c 74 68 69 73 7d 7d 29 2c 75 3d 6c 2e 70 72 6f 70 73 3b 66 6f 72 28 65 65 28 75 2c 6c 2e 6f 70 74 73 2e 73 70 65 63 69 61 6c 45 61 73 69 6e 67 29 3b 61 3e 6f 3b 6f 2b 2b 29 69 66 28 72 3d 74 65 2e 70 72 65 66 69 6c 74 65 72 73 5b 6f 5d 2e 63 61 6c 6c 28 6c 2c 65 2c 75 2c 6c 2e Data Ascii: var n=0,r=t?l.tweens.length:0;if(i)return this;for(i=!0;r>n;n++)l.tweens[n].run(1);return t?(s.notifyWith(e,[l,1,0]),s.resolveWith(e,[l,t])):s.rejectWith(e,[l,t]),this}}),u=l.props;for(ee(u,l.opts.specialEasing);a>o;o++)if(r=te.prefilters[o].call(l,e,u,l.
2024-08-21 08:57:49 UTC	3028	IN	Data Raw: 27 27 5d 3a 78 22 29 2c 49 2e 70 75 73 68 28 22 21 3d 22 2c 61 65 29 7d 29 2c 4d 3d 4d 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 4d 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 49 3d 49 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 49 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 79 65 2e 74 65 73 74 28 44 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 50 3d 74 7c 7c 79 65 2e 74 65 73 74 28 44 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 Data Ascii: '']:x"),I.push("!=",ae)}),M=M.length&&new RegExp(M.join("\|")),I=I.length&&new RegExp(I.join("\|")),t=ye.test(D.compareDocumentPosition),P=t\|\|ye.test(D.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!
2024-08-21 08:57:49 UTC	8949	IN	Data Raw: 65 6e 67 74 68 29 26 26 28 65 5b 30 5d 3d 65 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 5b 32 5d 3d 6e 2e 73 6c 69 63 65 28 30 2c 74 29 29 2c 65 2e 73 6c 69 63 65 28 30 2c 33 29 29 7d 7d 2c 66 69 6c 74 65 72 3a 7b 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 78 65 2c 6b 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 2a 22 3d 3d 3d 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 7d 7d 2c 43 4c 41 53 53 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 24 5b 65 2b 22 20 22 5d Data Ascii: ength)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(xe,ke).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=$[e+" "]
2024-08-21 08:57:49 UTC	16384	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 4c 65 2e 75 6e 69 71 75 65 53 6f 72 74 28 4c 65 2e 6d 65 72 67 65 28 74 68 69 73 2e 67 65 74 28 29 2c 4c 65 28 65 2c 74 29 29 29 29 7d 2c 61 64 64 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 6c 74 65 72 28 65 29 29 7d 7d 29 2c 4c 65 2e 65 61 63 68 28 7b 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 6e 75 6c 6c 7d 2c 70 61 72 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: turn this.pushStack(Le.uniqueSort(Le.merge(this.get(),Le(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),Le.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e
2024-08-21 08:57:49 UTC	1514	IN	Data Raw: 3d 65 2e 68 61 6e 64 6c 65 4f 62 6a 2c 4c 65 28 65 2e 64 65 6c 65 67 61 74 65 54 61 72 67 65 74 29 2e 6f 66 66 28 72 2e 6e 61 6d 65 73 70 61 63 65 3f 72 2e 6f 72 69 67 54 79 70 65 2b 22 2e 22 2b 72 2e 6e 61 6d 65 73 70 61 63 65 3a 72 2e 6f 72 69 67 54 79 70 65 2c 72 2e 73 65 6c 65 63 74 6f 72 2c 72 2e 68 61 6e 64 6c 65 72 29 2c 74 68 69 73 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 66 6f 72 28 69 20 69 6e 20 65 29 74 68 69 73 2e 6f 66 66 28 69 2c 74 2c 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 28 74 3d 3d 3d 21 31 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 29 26 26 28 6e 3d 74 2c 74 3d 76 6f 69 64 20 30 29 2c 6e 3d 3d 3d 21 31 26 26 28 6e 3d 41 29 2c 74 68 69 73 2e 65 61 63 Data Ascii: =e.handleObj,Le(e.delegateTarget).off(r.namespace?r.origType+"."+r.namespace:r.origType,r.selector,r.handler),this;if("object"==typeof e){for(i in e)this.off(i,t,e[i]);return this}return(t===!1\|\|"function"==typeof t)&&(n=t,t=void 0),n===!1&&(n=A),this.eac
2024-08-21 08:57:49 UTC	14870	IN	Data Raw: 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 44 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 Data Ascii: pend:function(){return P(this,arguments,function(e){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var t=D(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return P(this,arguments,function(e){this.parentNode&&this.parentNode.inse
2024-08-21 08:57:49 UTC	16384	IN	Data Raw: 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6f 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 61 3d 22 73 65 6c 65 63 74 2d 6f 6e 65 22 3d 3d 3d 65 2e 74 79 70 65 2c 73 3d 61 3f 6e 75 6c 6c 3a 5b 5d 2c 63 3d 61 3f 6f 2b 31 3a 69 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3e 6f 3f 63 3a 61 3f 6f 3a 30 3b 63 3e 72 3b 72 2b 2b 29 69 66 28 6e 3d 69 5b 72 5d 2c 28 6e 2e 73 65 6c 65 63 74 65 64 7c 7c 72 3d 3d 3d 6f 29 26 26 21 6e 2e 64 69 73 61 62 6c 65 64 26 26 28 21 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 7c 7c 21 6c 28 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 22 6f 70 74 67 72 6f 75 70 22 29 29 29 7b 69 66 28 74 3d 4c 65 28 6e 29 2e 76 61 6c 28 29 2c 61 29 72 65 74 75 72 6e 20 74 3b 73 2e 70 75 73 68 Data Ascii: e){var t,n,r,i=e.options,o=e.selectedIndex,a="select-one"===e.type,s=a?null:[],c=a?o+1:i.length;for(r=0>o?c:a?o:0;c>r;r++)if(n=i[r],(n.selected\|\|r===o)&&!n.disabled&&(!n.parentNode.disabled\|\|!l(n.parentNode,"optgroup"))){if(t=Le(n).val(),a)return t;s.push