Edit tour

Windows Analysis Report
https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082

Overview

General Information

Sample URL:	https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082
Analysis ID:	1513775
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on logo match)

Executes massive DNS lookups (> 100)

Found iframes

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1872,i,7939583766115478149,3744810054812024076,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1999052409:1726738150:c9vgRGi2x-hsLLFVdhmZ6JBmW8BzS3qLyHrSFdtYOMY/8c58ad192abac461/3b94114a5c48043 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3056sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 3b94114a5c48043sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7qy0h/0x4AAAAAAAiQbC_y5X91wEXb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	HTTP Parser: Iframe src: /support/recaptcha#6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KH9KHM&gtm_auth=&gtm_preview=&gtm_cookies_win=x
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WQKBJ88&gtm_auth=&gtm_preview=&gtm_cookies_win=x
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: Iframe src: https://a20976504213.cdn.optimizely.com/client_storage/a20976504213.html

Source: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	HTTP Parser: No favicon
Source: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	HTTP Parser: No favicon
Source: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	HTTP Parser: No favicon
Source: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	HTTP Parser: No favicon
Source: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	HTTP Parser: No favicon
Source: https://rodator.freshdesk.com/support/tickets/new	HTTP Parser: No favicon
Source: https://pulsedynose.top/pWoRA/	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No favicon

Source: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49777 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_347.2.dr, chromecache_304.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Uj:function(){e=Ab()},ld:function(){d()}}};var hc=ka(["data-gtm-yt-inspected-"]),vC=["www.youtube.com","www.youtube-nocookie.com"],wC,xC=!1; equals www.youtube.com (Youtube)
Source: chromecache_326.2.dr, chromecache_359.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=dA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Lb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},gA=function(){var a=[],b=function(c){return qb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_347.2.dr, chromecache_304.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Vg:e,Tg:f,Ug:g,Dh:k,Eh:m,Ce:n,Ab:b},q=z.YT;if(q)return q.ready&&q.ready(d),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();d()};E(function(){for(var t=D.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(GC(w,"iframe_api")\|\|GC(w,"player_api"))return b}for(var x=D.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!xC&&EC(x[A],p.Ce))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_530.2.dr	String found in binary or memory: m responsible for our chat platform and channel service strategy. The reason why we moved to Freshworks was for the APIs so that we can be our own chat client. I really enjoyed the collaboration.","nodeType":"text"}],"nodeType":"paragraph"}]},"links":{"entries":{"block":[],"inline":[]}}},"person":{"__typename":"EntityPerson","sys":{"id":"32OmY3vOH6dwAZL1C74spi"},"fullName":"Eric Bompas","role":"Product Manager, Klarna"},"image":{"__typename":"ComponentImage","sys":{"id":"3O5VtvaYOOrwT0uXxYlgio"},"internalName":"company-klarna-logo","alternateText":"Klarna","bynderImage":[{"id":"6EE397C2-9494-4EDC-B5DE2588E541D201","src":"https://dam.freshworks.com/m/29af53505aef9f5d/webimage-Klarna-logo-testimonial.jpg","name":"Klarna-logo-testimonial","tags":[],"type":"image","width":800,"height":800,"archive":0,"brandId":"8F17D55F-004D-4D20-86FDECFB43FBF507","limited":0,"fileSize":5626,"isPublic":1,"original":"https://dam.freshworks.com/m/29af53505aef9f5d/original/Klarna-logo-testimonial.webp","copyright":null,"extension":["webp"],"thumbnails":{"mini":"https://dam.freshworks.com/m/29af53505aef9f5d/mini-Klarna-logo-testimonial.jpg","thul":"https://dam.freshworks.com/m/29af53505aef9f5d/thul-Klarna-logo-testimonial.jpg","original":"https://dam.freshworks.com/m/29af53505aef9f5d/original/Klarna-logo-testimonial.webp","webimage":"https://dam.freshworks.com/m/29af53505aef9f5d/webimage-Klarna-logo-testimonial.jpg"},"dateCreated":"2023-01-23T17:20:29Z","description":null,"orientation":"square","watermarked":0,"dateModified":"2023-01-23T17:20:29Z","datePublished":"2023-01-23T17:20:06Z","videoPreviewURLs":[]}]},"fullStoryUrl":"https://www.youtube.com/watch?v=sWHw2SvmQ7g","background":"Primary Green-300","ctaLabel":"Watch video"},{"__typename":"ComponentTestimonialCard","sys":{"id":"8KNMmmre7OaYRU1WCeFtA"},"internalName":"fw-fd-homepage-testimonials-card-restaurant365","quote":{"json":{"data":{},"nodeType":"document","content":[{"data":{},"content":[{"data":{},"marks":[],"value":"Freshdesk has scaled with us. What I love most is that I don't need an administrator to maintain it. Ticket automation, screen-share through the chat, customized portals for different segments of our users","nodeType":"text"},{"data":{},"marks":[],"value":" equals www.youtube.com (Youtube)
Source: chromecache_329.2.dr, chromecache_552.2.dr, chromecache_257.2.dr, chromecache_495.2.dr, chromecache_596.2.dr, chromecache_326.2.dr, chromecache_576.2.dr, chromecache_359.2.dr, chromecache_442.2.dr, chromecache_407.2.dr, chromecache_451.2.dr, chromecache_526.2.dr	String found in binary or memory: return b}tC.H="internal.enableAutoEventOnTimer";var hc=ka(["data-gtm-yt-inspected-"]),vC=["www.youtube.com","www.youtube-nocookie.com"],wC,xC=!1; equals www.youtube.com (Youtube)
Source: chromecache_558.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_558.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_558.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_326.2.dr, chromecache_359.2.dr	String found in binary or memory: var IB=function(a,b,c,d,e){var f=Bz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Bz("fsl","nv.ids",[]):Bz("fsl","ids",[]);if(!g.length)return!0;var k=Gz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!oy(k,qy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: rodator.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: static.freshdev.io
Source: global traffic	DNS traffic detected: DNS query: marketplace-us.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: cdn.freshdev.io
Source: global traffic	DNS traffic detected: DNS query: pulsedynose.top
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: dam.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: cdn-ukwest.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: fast.wistia.com
Source: global traffic	DNS traffic detected: DNS query: alfred.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: cdn-public.sociabble.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: geoip-js.com
Source: global traffic	DNS traffic detected: DNS query: website-assets-fw.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: cdn3.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: a20976504213.cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: d952cmcgwqsjf.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: a.quora.com
Source: global traffic	DNS traffic detected: DNS query: www.dwin1.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: fw-cdn.com
Source: global traffic	DNS traffic detected: DNS query: freshdesk.freshsales.io
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: js.partnerstack.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: embed-ssl.wistia.com
Source: global traffic	DNS traffic detected: DNS query: pipedream.wistia.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: grsm.io
Source: global traffic	DNS traffic detected: DNS query: tracking.g2crowd.com
Source: global traffic	DNS traffic detected: DNS query: cdn.popt.in
Source: global traffic	DNS traffic detected: DNS query: q.quora.com
Source: global traffic	DNS traffic detected: DNS query: ct.capterra.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: affiliate.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: partnerlinks.io
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: t.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: secure-ds.serving-sys.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: display.popt.in
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: lantern.roeyecdn.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: 9303576.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: distillery.wistia.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: c.az.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: q-us1.az.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: srm.af.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: bs.serving-sys.com
Source: global traffic	DNS traffic detected: DNS query: js.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: lantern.roeye.com
Source: global traffic	DNS traffic detected: DNS query: k-us1.az.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: pixel.mathtag.com
Source: global traffic	DNS traffic detected: DNS query: action.dstillery.com
Source: global traffic	DNS traffic detected: DNS query: tag.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: b-code.liadm.com
Source: global traffic	DNS traffic detected: DNS query: js-tag.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: pixel.adswizz.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: action.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: rp.liadm.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: p1.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: simplifi.partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: s.ad.smaato.net
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 19 Sep 2024 09:51:16 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, max-age=0pragma: no-cachevary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EJWAemsSiTTv%2FTctEu1l7MWosF1VgfeVo5TcWUQobtbMXzg8cdZBDFH4vzI3wS8gUyUzf%2BGUI2m3c%2FdO5BDmiO20%2FQJtZblGuh6c8EH1PPBvfG36Y%2BuLMwn%2FWLsv8MFg8sE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8c58ad210e2b192c-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 19 Sep 2024 09:51:18 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: pn0vt94vQotGGzct8YWOsfbM+87GoNIaDBs=$h6S+QAxKGn4IGQL0Server: cloudflareCF-RAY: 8c58ad2acfe74259-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 19 Sep 2024 09:51:30 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: bJHLOArz4CRnKbONosehkv9LXanNTSbpq5w=$wVL9Cpk67jTVIjpecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8c58ad780f984405-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Thu, 19 Sep 2024 09:51:31 GMTx-amz-apigw-id: eWMViEehIAMEaJw=x-amzn-RequestId: 8499da20-cb15-42c1-a9e8-f12ee0d24d19x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 7a6b4cd1254095c5b4b5ec2c3af1870a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P7X-Amz-Cf-Id: yP_5kdOMyOaQPwRf2VFk0PZDog-xijkATrw0_247H0cLgGDhPHAM6g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Thu, 19 Sep 2024 09:51:32 GMTx-amz-apigw-id: eWMV0F77oAMEurw=x-amzn-RequestId: 23294da2-d582-4b09-9889-a81d89d0e98cx-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 b08e1d433d62b5ab056680968a8cc7ea.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P7X-Amz-Cf-Id: KGUM6998g_Ha0_IifY7UukfnuImJX7I-QU7jTtKnRkwaAoMY7KXWOw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Thu, 19 Sep 2024 09:51:39 GMTx-amz-apigw-id: eWMW2EQBoAMEuUQ=x-amzn-RequestId: 33595cac-9681-4efd-8553-5a5b1ecbe673x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 256cd380c9790a2b71d68709829caa18.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P7X-Amz-Cf-Id: jchSAsqJcXV9cAZGYR4K_8HNY_PQBzFLDaGsObscd1K1kSzj5kfdOQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 42Content-Type: text/plain; charset=UTF-8Date: Thu, 19 Sep 2024 09:51:41 GMTConnection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1872,i,7939583766115478149,3744810054812024076,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1872,i,7939583766115478149,3744810054812024076,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	0%	Avira URL Cloud	safe
https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	0%	Virustotal		Browse
https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://www.freshworks.com/_next/static/chunks/903-cd789c7eda2d5acb.js	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-conversion/1026675585/?random=1025979868&cv=7&fst=1726739505764&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgibx7ECIgEBQAE&pscrd=CJPrzvPOidap2gEiEwipgav33c6IAxXlkv0HHeZbCqcyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6G2h0dHBzOi8vd3d3LmZyZXNod29ya3MuY29tLw&is_vtc=1&cid=CAQSKQDpaXnf_d-tyBjNhPnHxI61i8rti9yjqwxalDk-xZNXJe70X1OB-Hxh&random=807791805	0%	Avira URL Cloud	safe
https://website-assets-fs.freshworks.com/attachments/ckv0x5x9i04n2v9g1nqokiop8-mips-v1.full.png	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js	0%	Avira URL Cloud	safe
https://alfred.freshworks.com/v1/get-wistia-data	0%	Avira URL Cloud	safe
https://rodator.freshdesk.com/assets/cdn/portal/scripts/bottom.js	0%	Avira URL Cloud	safe
https://www.froala.com/wysiwyg-editor)	0%	Avira URL Cloud	safe
https://dam.freshworks.com/m/201271b18ba1bfc1/original/headerLogoDark.webp	0%	Avira URL Cloud	safe
https://px.ads.linkedin.com/collect?	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js	0%	Virustotal		Browse
https://www.freshworks.com/_next/image/?url=%2Fimages%2FmobileLogo.webp&w=32&q=75	0%	Avira URL Cloud	safe
https://connect.facebook.net/signals/config/424906021678017?v=2.9.167&r=stable&domain=www.freshworks.com&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110%2C196%2C195%2C197%2C202%2C203%2C204%2C200%2C192%2C128%2C130%2C159%2C191%2C193%2C119%2C153%2C141%2C147%2C185%2C186%2C125%2C228%2C113%2C123%2C124%2C229%2C161%2C116%2C231%2C162%2C132%2C120%2C150%2C144%2C111	0%	Avira URL Cloud	safe
https://px.ads.linkedin.com/collect?	0%	Virustotal		Browse
https://www.froala.com/wysiwyg-editor)	0%	Virustotal		Browse
https://us-u.openx.net/w/1.0/sd?cc=1&id=537072966&val=81F65A0FE4284AC4AF94D4EA6D9CE383	0%	Avira URL Cloud	safe
https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=50adec2c-cd3d-4dce-8a7d-ba44166f23b7&gd	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/850250055/?random	0%	Avira URL Cloud	safe
https://cdn-ukwest.onetrust.com/consent/2a76c653-4097-454f-9172-b4ab95061efd/01904e63-efaf-7d0b-a6fa-6850a8a71030/en.json	0%	Avira URL Cloud	safe
https://alb.reddit.com/rp.gif?ts=1726739489833&id=t2_bworvc8bx&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=77ce81a1-e516-4a24-b503-903a6c8cc238&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_e9773deb&dpm=&dpcc=&dprc=	0%	Avira URL Cloud	safe
https://affiliate.freshworks.com/pr/grc/pk_3qkTdagUBg4qUoF8RSE1I0ErpsvpG71O	0%	Avira URL Cloud	safe
https://lantern.roeye.com/track.php?fingerprint=&referrer=&landingpage=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&useragent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&site=18172	0%	Avira URL Cloud	safe
https://d952cmcgwqsjf.cloudfront.net/assets/analytics.js	0%	Avira URL Cloud	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	Avira URL Cloud	safe
https://www.freshworks.com/icons/sprites.svg	0%	Avira URL Cloud	safe
https://api.company-target.com/api/v3/ip.json?referrer=&page=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&page_title=Freshdesk%3A%20Smart%2C%20Scalable%20Ticketing%20Solution%20%7C%20Freshworks	0%	Avira URL Cloud	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	Virustotal		Browse
https://my-8587dc8f8cdd0cf16935787.freshchat.com	0%	Avira URL Cloud	safe
https://my-8587dc8f8cdd0cf16935787.freshchat.com	0%	Virustotal		Browse
https://q.quora.com/_/ad/5aad95eceb754719af7f4e619a0230c2/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink	0%	Avira URL Cloud	safe
https://dam.freshworks.com/m/1d0b516d0070ebf1/original/databricks_Thumbnail.webp	0%	Avira URL Cloud	safe
https://a20976504213.cdn.optimizely.com/cdn-cgi/rum?	0%	Avira URL Cloud	safe
https://um.simpli.fi/yahoo	0%	Avira URL Cloud	safe
https://d952cmcgwqsjf.cloudfront.net/assets/analytics.js	0%	Virustotal		Browse

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.freshworks.com/_next/static/chunks/903-cd789c7eda2d5acb.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-conversion/1026675585/?random=1025979868&cv=7&fst=1726739505764&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgibx7ECIgEBQAE&pscrd=CJPrzvPOidap2gEiEwipgav33c6IAxXlkv0HHeZbCqcyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6G2h0dHBzOi8vd3d3LmZyZXNod29ya3MuY29tLw&is_vtc=1&cid=CAQSKQDpaXnf_d-tyBjNhPnHxI61i8rti9yjqwxalDk-xZNXJe70X1OB-Hxh&random=807791805	false	Avira URL Cloud: safe	unknown
https://alfred.freshworks.com/v1/get-wistia-data	false	Avira URL Cloud: safe	unknown
https://rodator.freshdesk.com/assets/cdn/portal/scripts/bottom.js	false	Avira URL Cloud: safe	unknown
https://dam.freshworks.com/m/201271b18ba1bfc1/original/headerLogoDark.webp	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/_next/image/?url=%2Fimages%2FmobileLogo.webp&w=32&q=75	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/424906021678017?v=2.9.167&r=stable&domain=www.freshworks.com&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110%2C196%2C195%2C197%2C202%2C203%2C204%2C200%2C192%2C128%2C130%2C159%2C191%2C193%2C119%2C153%2C141%2C147%2C185%2C186%2C125%2C228%2C113%2C123%2C124%2C229%2C161%2C116%2C231%2C162%2C132%2C120%2C150%2C144%2C111	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?cc=1&id=537072966&val=81F65A0FE4284AC4AF94D4EA6D9CE383	false	Avira URL Cloud: safe	unknown
https://alb.reddit.com/rp.gif?ts=1726739489833&id=t2_bworvc8bx&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=77ce81a1-e516-4a24-b503-903a6c8cc238&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_e9773deb&dpm=&dpcc=&dprc=	false	Avira URL Cloud: safe	unknown
https://cdn-ukwest.onetrust.com/consent/2a76c653-4097-454f-9172-b4ab95061efd/01904e63-efaf-7d0b-a6fa-6850a8a71030/en.json	false	Avira URL Cloud: safe	unknown
https://affiliate.freshworks.com/pr/grc/pk_3qkTdagUBg4qUoF8RSE1I0ErpsvpG71O	false	Avira URL Cloud: safe	unknown
https://lantern.roeye.com/track.php?fingerprint=&referrer=&landingpage=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&useragent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&site=18172	false	Avira URL Cloud: safe	unknown
https://d952cmcgwqsjf.cloudfront.net/assets/analytics.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.freshworks.com/icons/sprites.svg	false	Avira URL Cloud: safe	unknown
https://api.company-target.com/api/v3/ip.json?referrer=&page=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&page_title=Freshdesk%3A%20Smart%2C%20Scalable%20Ticketing%20Solution%20%7C%20Freshworks	false	Avira URL Cloud: safe	unknown
https://a20976504213.cdn.optimizely.com/cdn-cgi/rum?	false	Avira URL Cloud: safe	unknown
https://q.quora.com/_/ad/5aad95eceb754719af7f4e619a0230c2/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/yahoo	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://um.simpli.fi/exelatem	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://d.agkn.com/pixel/10751/?che=1726739508042&ip=8.46.123.33&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D216783105010001452638	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/_next/static/chunks/pages/_app-7eadc37a36d91151.js	false	Avira URL Cloud: safe	unknown
https://cdn-public.sociabble.com/blob/js/leadgen/track.min.js?v=1.7	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NTBhZGVjMmMtY2QzZC00ZGNlLThhN2QtYmE0NDE2NmYyM2I3&gdpr=0&gdpr_consent=&ttd_tdid=50adec2c-cd3d-4dce-8a7d-ba44166f23b7	false	Avira URL Cloud: safe	unknown
https://ce.lijit.com/merge?pid=2&3pid=81F65A0FE4284AC4AF94D4EA6D9CE383	false	Avira URL Cloud: safe	unknown
https://grsm.io/pr/grc/pk_3qkTdagUBg4qUoF8RSE1I0ErpsvpG71O?get_pscd=true	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/_next/image/?url=%2F_next%2Fstatic%2Fmedia%2Fchat-icon.e2833188.png&w=1920&q=75	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-20651269-1&cid=1497282870.1726739489&jid=546104105&gjid=849295119&_gid=1476755603.1726739489&_u=YGDAiEABBAAAAGAEKC~&z=571998304	false	Avira URL Cloud: safe	unknown
https://pixel.adswizz.com/update_pixel?key=72cc214741d32bda050156c5b6a053f2eb3e0378759bcf9090456bbf9fbc3d20	false	Avira URL Cloud: safe	unknown
https://rp.liadm.com/j?dtstmp=1726739502509&aid=a-07ph&se=eyJldmVudCI6InZpZXdDb250ZW50IiwiY29udGVudFR5cGUiOiJQcm9kdWN0In0&duid=cbc8e3918a84--01j84v3ncfeq5wf1c5b6t3gftj&tv=v3.1.0&pu=https%3A%2F%2Fwww.freshworks.com%2Ffreshdesk%2F%3Futm_source%3Dportal%26utm_medium%3Dreflink%26utm_campaign%3Dportal_reflink&wpn=lc-bundle&wpv=v3.1.0&cd=.freshworks.com&n3pc=true	false	Avira URL Cloud: safe	unknown
https://cdn.freshdev.io/assets/heap_receiver.html	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/463211681285603?v=2.9.167&r=stable&domain=www.freshworks.com&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/_next/static/chunks/12-6e72fb01eaa871ff.js	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/ox_match	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/bluekai	false	Avira URL Cloud: safe	unknown
https://srm.af.contentsquare.net/exist?v=74a54d94e7ea08a522bac321b1bde7da85a4209d&pid=58736&pn=1&sn=1&uu=a7ea15c2-fdc5-ae75-c82a-fbb18da257eb	false	Avira URL Cloud: safe	unknown
https://loadm.exelator.com/load/?p=204&g=2191&simid=81F65A0FE4284AC4AF94D4EA6D9CE383&j=0	false	Avira URL Cloud: safe	unknown
https://um.simpli.fi/ad_advisor	false	Avira URL Cloud: safe	unknown
https://sync.smartadserver.com/getuid?url=https%3A%2F%2Ffei.pro-market.net%2Fengine%3Fsite%3D161185%26size%3D1x1%26du%3D36%26csync%3D[sas_uid]	false	Avira URL Cloud: safe	unknown

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.204.158.49	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
stats.g.doubleclick.net	173.194.76.155	true	false	unknown
s3.amazonaws.com	16.15.176.197	true	false	unknown
t.co	172.66.0.227	true	false	unknown
d36ufq1ap5wy15.cloudfront.net	13.32.121.29	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
tracking.g2crowd.com	104.18.30.176	true	false	unknown
sync.intentiq.com	3.160.150.105	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
bcp.crwdcntrl.net	52.211.71.211	true	false	unknown
sni1gl.wpc.deltacdn.net	152.199.21.175	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	unknown
p1.zemanta.com	172.67.36.125	true	false	unknown
s.twitter.com	104.244.42.131	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	54.93.106.178	true	false	unknown
detgh1asa1dg4.cloudfront.net	18.244.18.19	true	false	unknown
reddit.map.fastly.net	151.101.193.140	true	false	unknown
googleads.g.doubleclick.net	142.250.186.34	true	false	unknown
d952cmcgwqsjf.cloudfront.net	13.35.58.67	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	3.94.177.212	true	false	unknown
fw-cdn.com	18.66.122.8	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
adservice.google.com	216.58.206.66	true	false	unknown
insight.adsrvr.org	15.197.193.217	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.44.245.245	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
us-global-accelerator-canary.freshsales.io	3.83.59.161	true	false	unknown
freshworks.bynder.com	3.161.82.10	true	false	unknown
display.popt.in	104.21.50.204	true	false	unknown
ad.doubleclick.net	142.250.186.70	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	18.193.63.175	true	false	unknown
fei.pro-market.net	107.178.240.89	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
cdn.popt.in	172.67.166.202	true	false	unknown
d1p8wauaa7285.cloudfront.net	13.32.27.6	true	false	unknown
rodator.freshdesk.com	52.3.125.17	true	false	unknown
geoip-js.com	172.64.154.146	true	false	unknown
api.company-target.com	18.66.102.127	true	false	unknown
srm.af.contentsquare.net	20.75.114.39	true	false	unknown
ib.anycast.adnxs.com	185.89.210.153	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	unknown
lantern.roeyecdn.com	13.224.189.100	true	false	unknown
pulsedynose.top	188.114.97.3	true	false	unknown
www.freshworks.com	18.66.112.92	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	unknown
website-assets-fw.freshworks.com	3.161.82.15	true	false	unknown
sonar-alb-4-35-0-476566223.eu-west-1.elb.amazonaws.com	52.211.87.164	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
partnerlinks.io	104.18.31.133	true	false	unknown
js.sentry-cdn.com	151.101.66.217	true	false	unknown
livepixel-production.bln.liveintent.com	52.21.179.243	true	false	unknown
marketplace-us.freshworks.com	44.206.193.178	true	false	unknown
rtb-csync-euw1.smartadserver.com	81.17.55.106	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
cm.g.doubleclick.net	142.250.184.194	true	false	unknown
sync.1rx.io	46.228.174.117	true	false	unknown
js-tag.zemanta.com	172.67.36.125	true	false	unknown
q.quora.com	52.4.97.148	true	false	unknown
grsm.io	104.18.11.212	true	false	unknown
dep.aa.contentsquare.net	51.104.148.203	true	false	unknown
logx.optimizely.com	34.49.241.189	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	unknown
cdn-ukwest.onetrust.com	104.18.32.137	true	false	unknown
alfred.freshworks.com	3.160.150.127	true	false	unknown
cdn3.optimizely.com	172.64.152.14	true	false	unknown
cdn.freshdev.io	13.35.58.64	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
cdn.optimizely.com	104.18.65.57	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.129.140	true	false	unknown
analytics-alv.google.com	216.239.38.181	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
q-us1.az.contentsquare.net	20.75.114.39	true	false	unknown
td.doubleclick.net	142.250.186.130	true	false	unknown
js.partnerstack.com	104.18.6.218	true	false	unknown
a20976504213.cdn.optimizely.com	104.18.65.57	true	false	unknown
d2rpa84eq2akk3.cloudfront.net	18.173.205.104	true	false	unknown
dart.l.doubleclick.net	142.250.186.38	true	false	unknown
pixel-origin.mathtag.com	216.200.232.249	true	false	unknown
www.recaptcha.net	142.250.185.195	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
tag.demandbase.com	18.245.46.44	true	false	unknown
i.simpli.fi	35.234.162.151	true	false	unknown
t.contentsquare.net	18.244.18.115	true	false	unknown
d2pbcviywxotf2.cloudfront.net	143.204.215.109	true	false	unknown
tag-logger.demandbase.com	18.173.205.127	true	false	unknown
d16185quy6wls6.cloudfront.net	18.66.122.33	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	52.51.150.23	true	false	unknown
tag.simpli.fi	35.204.89.238	true	false	unknown
dep-malka.af.contentsquare.net	20.85.27.251	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
lantern.roeye.com	54.220.246.244	true	false	unknown
s.ad.smaato.net	13.32.27.65	true	false	unknown
adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com	18.196.229.143	true	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://website-assets-fs.freshworks.com/attachments/ckv0x5x9i04n2v9g1nqokiop8-mips-v1.full.png	chromecache_263.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_402.2.dr, chromecache_517.2.dr	false	URL Reputation: safe	unknown
https://www.froala.com/wysiwyg-editor)	chromecache_255.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_526.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=50adec2c-cd3d-4dce-8a7d-ba44166f23b7&gd	chromecache_284.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/850250055/?random	chromecache_354.2.dr, chromecache_519.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_358.2.dr, chromecache_513.2.dr, chromecache_563.2.dr	false	URL Reputation: safe	unknown
https://my-8587dc8f8cdd0cf16935787.freshchat.com	chromecache_487.2.dr, chromecache_406.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_563.2.dr	false	URL Reputation: safe	unknown
https://dam.freshworks.com/m/1d0b516d0070ebf1/original/databricks_Thumbnail.webp	chromecache_401.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.us.heap-api.com/config/	chromecache_572.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.freshworks.com	chromecache_265.2.dr, chromecache_478.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://dam.freshworks.com/m/29af53505aef9f5d/mini-Klarna-logo-testimonial.jpg	chromecache_530.2.dr	false	Avira URL Cloud: safe	unknown
https://embed-cloudfront.wistia.com/deliveries/757d2f57eac6fe4f591238158825179a7cfba3d3.m3u8	chromecache_578.2.dr, chromecache_320.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_284.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.freshworks.com/pl/	chromecache_530.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fw.freshworks.com/attachments/ckhbkyq6t02y6kmfzanx1mnio-instaprint.full.png	chromecache_263.2.dr	false	Avira URL Cloud: safe	unknown
https://embed-cloudfront.wistia.com/deliveries/b9f7bb9d31312e32fe24dc093f65b889e2c8ad82.m3u8	chromecache_578.2.dr, chromecache_320.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fs.freshworks.com/attachments/ckv0ju58r02oovtg10x4tgrzb-fast-time-to-value-1.	chromecache_263.2.dr	false	Avira URL Cloud: safe	unknown
https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-14540	chromecache_555.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/privacy/	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/tr/	chromecache_530.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/	chromecache_530.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fs.freshworks.com/attachments/ckv0efayx02ndv9g1bdx8u08m-aberdeen-case-study-1	chromecache_263.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/list-of-cookies/	chromecache_583.2.dr, chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_358.2.dr, chromecache_513.2.dr, chromecache_563.2.dr	false	URL Reputation: safe	unknown
https://kushagra.dev/lab/hint/	chromecache_255.2.dr	false	Avira URL Cloud: safe	unknown
https://et.company-target.com	chromecache_315.2.dr, chromecache_263.2.dr	false	Avira URL Cloud: safe	unknown
https://cookiepedia.co.uk/giving-consent-to-cookies	chromecache_583.2.dr, chromecache_533.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/crm/signup/?plan_id=suite	chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_358.2.dr, chromecache_513.2.dr, chromecache_563.2.dr	false	URL Reputation: safe	unknown
https://www.freshworks.com/cn/	chromecache_530.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/880828900/?random	chromecache_428.2.dr, chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fs.freshworks.com/attachments/ckv0k2aix0361v9g1rbgjpvyh-payvision-case-study.	chromecache_263.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_255.2.dr	false	URL Reputation: safe	unknown
https://www.freshworks.com/marketing-automation/email-marketing/	chromecache_265.2.dr, chromecache_478.2.dr	false	Avira URL Cloud: safe	unknown
https://www.recaptcha.net/recaptcha/enterprise/	chromecache_414.2.dr, chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/signup/	chromecache_530.2.dr	false	Avira URL Cloud: safe	unknown
https://website-assets-fs.freshworks.com/attachments/ckv0efbv10230vtg198l4aek3-isg-case-study-1.full	chromecache_263.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_358.2.dr, chromecache_513.2.dr, chromecache_563.2.dr	false	URL Reputation: safe	unknown
https://www.freshworks.com/freshservice/	chromecache_401.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_304.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freshworks.com/marketing-automation/ab-testing/	chromecache_265.2.dr, chromecache_478.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
52.70.208.6	unknown	United States	14618	AMAZON-AESUS	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
185.89.210.153	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
18.193.63.175	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
13.35.58.67	d952cmcgwqsjf.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.193.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
13.32.121.87	unknown	United States	16509	AMAZON-02US	false
13.35.58.64	cdn.freshdev.io	United States	16509	AMAZON-02US	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
52.216.63.24	unknown	United States	16509	AMAZON-02US	false
52.18.102.4	unknown	United States	16509	AMAZON-02US	false
142.250.186.70	ad.doubleclick.net	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.244.18.115	t.contentsquare.net	United States	16509	AMAZON-02US	false
151.101.66.217	js.sentry-cdn.com	United States	54113	FASTLYUS	false
18.244.18.94	unknown	United States	16509	AMAZON-02US	false
143.204.215.129	unknown	United States	16509	AMAZON-02US	false
37.252.171.53	unknown	European Union	29990	ASN-APPNEXUS	false
34.254.143.3	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
3.83.59.161	us-global-accelerator-canary.freshsales.io	United States	14618	AMAZON-AESUS	false
13.248.245.213	unknown	United States	16509	AMAZON-02US	false
54.220.246.244	lantern.roeye.com	United States	16509	AMAZON-02US	false
104.18.30.176	tracking.g2crowd.com	United States	13335	CLOUDFLARENETUS	false
52.21.179.243	livepixel-production.bln.liveintent.com	United States	14618	AMAZON-AESUS	false
64.233.166.157	unknown	United States	15169	GOOGLEUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.35.58.53	unknown	United States	16509	AMAZON-02US	false
172.67.36.125	p1.zemanta.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.230	unknown	United States	15169	GOOGLEUS	false
142.250.185.195	www.recaptcha.net	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.deltacdn.net	United States	15133	EDGECASTUS	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
52.211.71.211	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
104.18.31.133	partnerlinks.io	United States	13335	CLOUDFLARENETUS	false
20.75.114.39	srm.af.contentsquare.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.196.229.143	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
52.211.87.164	sonar-alb-4-35-0-476566223.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
216.200.232.253	unknown	United States	30419	MEDIAMATH-INCUS	false
151.101.194.217	unknown	United States	54113	FASTLYUS	false
18.66.122.128	unknown	United States	3	MIT-GATEWAYSUS	false
172.64.152.14	cdn3.optimizely.com	United States	13335	CLOUDFLARENETUS	false
143.204.215.109	d2pbcviywxotf2.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
104.18.35.242	unknown	United States	13335	CLOUDFLARENETUS	false
18.173.205.104	d2rpa84eq2akk3.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
184.72.189.255	unknown	United States	14618	AMAZON-AESUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
13.32.121.29	d36ufq1ap5wy15.cloudfront.net	United States	16509	AMAZON-02US	false
13.32.27.106	unknown	United States	7018	ATT-INTERNET4US	false
185.89.210.46	unknown	Germany	29990	ASN-APPNEXUS	false
3.161.82.66	unknown	United States	16509	AMAZON-02US	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
216.200.232.249	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
104.18.6.218	js.partnerstack.com	United States	13335	CLOUDFLARENETUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
151.101.129.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
172.67.166.202	cdn.popt.in	United States	13335	CLOUDFLARENETUS	false
172.66.0.227	t.co	United States	13335	CLOUDFLARENETUS	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
142.250.185.98	unknown	United States	15169	GOOGLEUS	false
54.220.164.105	unknown	United States	16509	AMAZON-02US	false
52.51.150.23	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
173.194.76.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.160.150.127	alfred.freshworks.com	United States	16509	AMAZON-02US	false
35.204.158.49	um.simpli.fi	United States	15169	GOOGLEUS	false
18.66.102.127	api.company-target.com	United States	3	MIT-GATEWAYSUS	false
81.17.55.173	unknown	Netherlands	24588	NETPROVODOV-ASRU	false
3.160.150.74	unknown	United States	16509	AMAZON-02US	false
18.66.122.8	fw-cdn.com	United States	3	MIT-GATEWAYSUS	false
81.17.55.172	unknown	Netherlands	24588	NETPROVODOV-ASRU	false
13.35.58.109	unknown	United States	16509	AMAZON-02US	false
104.18.32.137	cdn-ukwest.onetrust.com	United States	13335	CLOUDFLARENETUS	false
35.234.162.151	i.simpli.fi	United States	15169	GOOGLEUS	false
34.49.241.189	logx.optimizely.com	United States	2686	ATGS-MMD-ASUS	false
18.173.205.127	tag-logger.demandbase.com	United States	3	MIT-GATEWAYSUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
23.23.73.11	unknown	United States	14618	AMAZON-AESUS	false
54.93.157.94	unknown	United States	16509	AMAZON-02US	false
13.224.189.100	lantern.roeyecdn.com	United States	16509	AMAZON-02US	false
54.74.84.145	unknown	United States	16509	AMAZON-02US	false
52.44.245.245	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.245.46.44	tag.demandbase.com	United States	16509	AMAZON-02US	false
142.250.186.35	unknown	United States	15169	GOOGLEUS	false
142.250.186.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
81.17.55.106	rtb-csync-euw1.smartadserver.com	Netherlands	24588	NETPROVODOV-ASRU	false
104.18.65.57	cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
142.250.186.38	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
142.250.184.194	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.4.97.148	q.quora.com	United States	14618	AMAZON-AESUS	false
104.18.30.133	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.244.42.131	s.twitter.com	United States	13414	TWITTERUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1513775
Start date and time:	2024-09-19 11:49:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@32/537@421/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://rodator.freshdesk.com/support/solutions/folders/156000056609 Browse: https://rodator.freshdesk.com/support/solutions Browse: https://rodator.freshdesk.com/support/solutions/156000021554 Browse: https://rodator.freshdesk.com/support/tickets/new Browse: https://pulsedynose.top/pWoRA/ Browse: https://www.freshworks.com/freshdesk/?utm_source=portal&utm_medium=reflink&utm_campaign=portal_reflink

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
Preview:	{"bakers":[]}

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:34 UTC	739	OUT	GET /en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 09:50:34 UTC	6148	IN	HTTP/1.1 302 Found Date: Thu, 19 Sep 2024 09:50:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 302 Found Cache-Control: no-cache X-Ratelimit-Limit: 300 X-Ratelimit-Reset: 190924095134 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ratelimit-Remaining: 299 X-Xss-Protection: 1; mode=block X-Request-Id: 5b23dd59-52f0-40e0-8124-a40901bc4ac6 Location: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] Set-Cookie: _x_w=46_1; path=/; HttpOnly; secure Set-Cookie: _x_m=x_c; path=/; HttpOnly; secure X-Fw-Ratelimiting-Managed: true X-Ratelimit-Total: 200 X-Ratelimit-Remaining: 199 X-Ratelimit-Used-Currentrequest: 1 X-Envoy-Upstream-Service-Time: 64 X-Trace-Id: 00-89cb0bf344d0d08e6c820fae093ac017-f4a904e75b79ff59-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:34 UTC	174	IN	Data Raw: 61 38 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 6f 64 61 74 6f 72 2e 66 72 65 73 68 64 65 73 6b 2e 63 6f 6d 2f 73 75 70 70 6f 72 74 2f 73 6f 6c 75 74 69 6f 6e 73 2f 61 72 74 69 63 6c 65 73 2f 31 35 36 30 30 30 30 31 33 33 32 31 2d 73 6f 6c 69 63 69 74 75 64 2d 64 65 2d 70 72 65 73 75 70 75 65 73 74 6f 2d 31 34 35 34 30 38 32 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a8<html><body>You are being <a href="https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082">redirected</a>.</body></html>
2024-09-19 09:50:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:34 UTC	765	OUT	GET /support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:34 UTC	1043	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate X-Ratelimit-Limit: 300 X-Ratelimit-Reset: 190924095134 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ratelimit-Remaining: 299 X-Xss-Protection: 1; mode=block X-Request-Id: aeca876f-6f35-47f7-9d01-3b20f1ba1181 Etag: W/"8a0d9e7bc5cab324cef32026d4b3f0e2" X-Content-Type-Options: nosniff X-Fw-Ratelimiting-Managed: true X-Ratelimit-Total: 200 X-Ratelimit-Remaining: 198 X-Ratelimit-Used-Currentrequest: 1 X-Envoy-Upstream-Service-Time: 71 X-Trace-Id: 00-94749209f7d6c7fa69ddd41a623f65fb-c4a6511c1bf18f84-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:34 UTC	15341	IN	Data Raw: 36 34 64 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 70 61 72 61 6d 22 20 63 6f 6e 74 65 6e 74 3d 22 61 75 74 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 38 4d 44 75 4d 35 69 6a 43 4a 54 46 6e 38 51 43 46 54 41 69 48 71 51 47 49 2b Data Ascii: 64d9<!DOCTYPE html><html lang="en" data-date-format="non_us" dir="ltr"><head> <meta name="robots" content="noindex, nofollow"> <meta name="csrf-param" content="authenticity_token" /><meta name="csrf-token" content="K8MDuM5ijCJTFn8QCFTAiHqQGI+
2024-09-19 09:50:34 UTC	10484	IN	Data Raw: 61 63 68 6d 65 6e 74 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 20 64 61 74 61 2d 69 64 3d 22 31 35 36 30 30 30 30 34 32 33 33 37 22 3e 3c 2f 70 3e 3c 70 3e 3c 2f 70 3e 3c 68 31 20 64 61 74 61 2d 69 64 65 6e 74 69 66 79 65 6c 65 6d 65 6e 74 3d 22 32 31 34 22 20 64 69 72 3d 22 6c 74 72 22 20 73 74 79 6c 65 3d 22 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 2e 32 35 72 65 6d 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 34 32 2e 39 70 78 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 34 2c 20 35 30 2c 20 37 31 29 3b 20 66 6f Data Ascii: achment="[object Object]" data-id="156000042337"></p><p></p><h1 data-identifyelement="214" dir="ltr" style="box-sizing: border-box; font-size: 2em; margin-bottom: 0.25rem; margin-left: 0px; font-weight: 400; line-height: 42.9px; color: rgb(24, 50, 71); fo
2024-09-19 09:50:34 UTC	6306	IN	Data Raw: 31 38 39 61 0d 0a 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 68 65 63 6b 20 22 3e 0a 09 0a 0a 09 0a 09 0a 0a 09 0a 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 5b 5d 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 66 61 6c 73 65 22 3e 0a 09 0a 0a 09 3c 69 6e 70 75 74 0a 20 20 09 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 0a 20 20 09 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 20 22 0a 20 20 09 69 64 3d 22 33 22 0a 09 09 0a 20 20 09 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 5b 5d 22 0a 09 09 76 61 6c 75 65 3d 22 33 22 0a 20 20 09 0a 09 0a 09 09 0a 20 20 3e 0a 0a 20 20 20 09 0a 0a 09 0a 09 09 3c 6c 61 62 65 Data Ascii: 189a <div class="form-check "> <input name="message[]" type="hidden" value="false"><input type="checkbox" class="form-check-input " id="3" name="message[]"value="3" > <labe
2024-09-19 09:50:34 UTC	16384	IN	Data Raw: 36 38 64 39 0d 0a 30 73 6a 59 45 43 47 51 4d 5a 41 37 47 79 71 6a 4f 58 41 6c 4c 4b 68 75 42 50 7a 48 7a 73 63 35 59 37 67 76 67 4d 45 66 75 2f 34 50 76 2b 6e 31 74 64 4e 53 4c 59 4b 61 57 2b 56 79 67 55 39 6c 56 4b 66 54 69 58 79 30 45 68 57 2f 45 68 43 66 64 42 52 49 4e 53 79 67 4f 30 31 72 65 47 38 39 50 75 41 7a 69 56 42 79 4a 31 55 6b 32 41 49 33 57 37 36 6c 46 4b 47 66 58 58 47 65 2f 36 66 6a 4d 34 4f 4e 6a 71 61 58 4f 38 59 33 56 4e 2b 39 68 2f 6d 71 35 5a 58 62 61 51 6a 41 49 42 42 59 4b 50 64 64 30 48 47 50 48 4e 43 34 58 43 50 75 58 4c 44 7a 6d 6a 76 4f 4f 68 73 52 5a 55 7a 49 7a 2f 6b 52 6f 2b 56 67 73 45 50 63 6b 59 41 2b 43 2b 73 34 55 51 69 32 50 71 65 37 37 76 48 78 52 41 5a 63 51 55 70 32 5a 46 51 2f 54 43 64 48 56 57 4a 6d 50 4d 76 55 6b Data Ascii: 68d90sjYECGQMZA7GyqjOXAlLKhuBPzHzsc5Y7gvgMEfu/4Pv+n1tdNSLYKaW+VygU9lVKfTiXy0EhW/EhCfdBRINSygO01reG89PuAziVByJ1Uk2AI3W76lFKGfXXGe/6fjM4ONjqaXO8Y3VN+9h/mq5ZXbaQjAIBBYKPdd0HGPHNC4XCPuXLDzmjvOOhsRZUzIz/kRo+VgsEPckYA+C+s4UQi2Pqe77vHxRAZcQUp2ZFQ/TCdHVWJmPMvUk
2024-09-19 09:50:34 UTC	10465	IN	Data Raw: 4f 33 64 75 6f 67 34 4f 45 52 6d 4a 4b 4e 58 34 42 4a 37 64 52 42 52 37 34 6b 38 69 2b 69 54 6d 64 34 53 70 45 64 47 76 4a 34 4e 35 67 43 34 4e 2f 35 53 54 53 4b 79 5a 50 68 53 38 6b 33 48 6b 76 6e 4d 4d 75 77 5a 59 57 6e 32 44 69 46 36 71 74 54 34 6a 72 41 68 4d 49 77 5a 38 4f 33 7a 66 68 37 4e 55 4d 7a 41 2f 56 53 36 58 66 32 66 62 64 71 6f 4e 66 64 70 59 30 36 31 4d 4b 59 57 67 56 51 31 78 4d 4a 6a 35 6f 38 56 69 45 51 47 34 66 6f 49 35 4d 2f 50 54 30 4e 6b 6b 7a 54 2f 51 35 31 7a 42 4e 2b 79 62 38 33 39 37 38 44 76 4c 63 35 35 39 52 41 67 2b 6c 55 68 38 4a 32 64 34 6d 39 78 52 56 79 50 2b 2f 4a 51 6d 78 33 47 4f 62 78 49 42 73 6b 48 32 50 36 55 54 37 74 7a 67 76 63 59 59 6e 4e 35 54 45 7a 4e 66 32 73 77 68 4d 4a 66 4c 6e 5a 76 32 4f 77 67 47 4f 4b 56 Data Ascii: O3duog4OERmJKNX4BJ7dRBR74k8i+iTmd4SpEdGvJ4N5gC4N/5STSKyZPhS8k3HkvnMMuwZYWn2DiF6qtT4jrAhMIwZ8O3zfh7NUMzA/VS6Xf2fbdqoNfdpY061MKYWgVQ1xMJj5o8ViEQG4foI5M/PT0NkkzT/Q51zBN+yb83978DvLc559RAg+lUh8J2d4m9xRVyP+/JQmx3GObxIBskH2P6UT7tzgvcYYnN5TEzNf2swhMJfLnZv2OwgGOKV
2024-09-19 09:50:34 UTC	3079	IN	Data Raw: 63 30 30 0d 0a 62 2b 39 6e 57 30 34 56 66 61 62 4e 58 4a 79 6a 35 64 42 2f 61 48 35 51 77 57 6c 50 45 68 34 30 2f 61 70 2b 4b 59 6f 76 35 65 6d 62 78 53 4e 49 62 43 50 67 72 39 65 53 48 33 52 78 77 4d 39 56 48 7a 5a 57 39 32 39 6c 42 30 59 6e 67 39 44 75 46 30 61 70 72 53 75 78 32 59 46 6b 57 41 7a 57 79 6d 4c 74 55 65 71 32 78 73 66 45 54 47 65 61 52 55 34 46 50 52 76 39 48 52 45 78 66 4f 65 4f 62 6e 47 59 56 33 59 61 6b 6c 4b 38 4a 49 64 35 6c 41 78 39 46 55 64 69 4d 2b 76 31 67 4d 4d 67 68 49 77 62 38 76 32 43 34 47 55 33 54 75 6b 63 55 41 2b 46 6c 4d 51 79 44 64 2f 59 73 48 33 5a 4d 62 50 4b 5a 44 73 42 55 4d 5a 34 4d 77 32 45 6f 69 73 4c 51 79 69 55 56 61 51 77 54 48 67 71 46 4f 42 5a 44 56 61 49 55 6a 72 65 68 71 75 70 76 45 66 47 73 6e 43 50 70 53 Data Ascii: c00b+9nW04VfabNXJyj5dB/aH5QwWlPEh40/ap+KYov5embxSNIbCPgr9eSH3RxwM9VHzZW929lB0Yng9DuF0aprSux2YFkWAzWymLtUeq2xsfETGeaRU4FPRv9HRExfOeObnGYV3YaklK8JId5lAx9FUdiM+v1gMMghIwb8v2C4GU3TukcUA+FlMQyDd/YsH3ZMbPKZDsBUMZ4Mw2EoisLQyiUVaQwTHgqFOBZDVaIUjrehqupvEfGsnCPpS
2024-09-19 09:50:34 UTC	16384	IN	Data Raw: 34 35 65 34 0d 0a 4c 69 46 67 4d 34 4d 59 38 2b 6f 51 51 50 38 6a 4d 5a 55 37 6f 6a 76 38 75 30 4d 39 38 52 41 66 74 74 6e 52 67 6e 72 39 6b 41 42 64 4e 6b 57 6a 2f 68 6e 7a 70 58 53 6e 6c 57 2b 33 74 37 51 64 33 64 58 57 56 32 6b 56 69 49 42 43 59 6c 34 34 31 7a 6d 69 2f 6c 69 41 78 57 79 4c 6f 49 50 48 75 77 6b 6d 79 38 6a 75 5a 68 46 75 52 5a 4d 42 36 74 75 2b 71 33 6f 2f 69 43 31 48 67 5a 50 75 6a 69 6d 30 77 43 72 75 73 34 7a 4f 39 41 77 4c 32 63 4f 32 77 58 7a 71 68 4e 5a 52 75 70 74 42 71 33 79 57 42 69 57 57 5a 42 38 76 69 48 2b 72 75 74 68 63 6c 61 6a 74 35 35 49 35 75 51 55 76 2f 44 61 46 65 33 2f 6c 2b 56 5a 6e 6b 53 56 6d 49 49 63 41 59 39 6f 46 49 33 6e 66 4d 72 39 57 33 48 76 6b 65 58 6a 35 30 6b 66 69 49 36 4e 4f 49 7a 6e 74 6b 52 56 45 34 Data Ascii: 45e4LiFgM4MY8+oQQP8jMZU7ojv8u0M98RAfttnRgnr9kABdNkWj/hnzpXSnlW+3t7Qd3dXWV2kViIBCYl441zmi/liAxWyLoIPHuwkmy8juZhFuRZMB6tu+q3o/iC1HgZPujim0wCrus4zO9AwL2cO2wXzqhNZRuptBq3yWBiWWZB8viH+ruthclajt55I5uQUv/DaFe3/l+VZnkSVmIIcAY9oFI3nfMr9W3HvkeXj50kfiI6NOIzntkRVE4
2024-09-19 09:50:34 UTC	16384	IN	Data Raw: 30 43 50 4a 49 48 6b 32 73 51 48 6b 4b 42 2b 73 61 4e 33 42 6f 70 79 4b 46 71 62 68 31 4e 6d 4e 72 78 6b 76 52 49 37 5a 30 43 44 6a 2b 62 47 4b 48 6c 33 2f 39 49 51 54 49 45 56 39 6d 34 70 7a 2f 45 32 45 41 6a 4d 6c 56 49 2b 7a 45 7a 4f 70 64 46 4b 30 7a 54 2f 34 31 49 2b 36 6f 6f 71 46 6b 55 56 7a 45 79 61 70 73 6c 48 4f 50 35 73 53 38 4f 34 41 6e 36 2f 66 7a 49 72 7a 67 73 74 71 6f 6a 6f 74 6e 41 34 7a 44 46 62 68 47 45 59 37 4f 2b 52 46 33 75 65 69 4e 67 72 57 69 4c 69 48 30 4f 68 55 4c 6a 61 4b 64 67 61 6e 49 51 67 66 6b 63 6b 6a 37 6b 4c 54 6a 33 75 4e 4c 69 37 70 4a 48 46 38 2b 33 7a 57 6a 7a 6f 62 55 4b 68 4e 53 5a 6a 79 62 42 48 41 58 75 66 30 4e 32 75 70 70 6a 43 67 68 4f 64 39 33 37 56 55 6a 71 41 2b 68 72 65 31 6e 68 5a 6f 42 6b 31 35 4b 69 4d Data Ascii: 0CPJIHk2sQHkKB+saN3BopyKFqbh1NmNrxkvRI7Z0CDj+bGKHl3/9IQTIEV9m4pz/E2EAjMlVI+zEzOpdFK0zT/41I+6ooqFkUVzEyapslHOP5sS8O4An6/fzIrzgstqojotnA4zDFbhGEY7O+RF3ueiNgrWiLiH0OhULjaKdganIQgfkckj7kLTj3uNLi7pJHF8+3zWjzobUKhNSZjybBHAXuf0N2uppjCghOd937VUjqA+hre1nhZoBk15KiM
2024-09-19 09:50:34 UTC	10	IN	Data Raw: 63 56 42 55 4b 65 56 4e 0d 0a Data Ascii: cVBUKeVN
2024-09-19 09:50:34 UTC	16384	IN	Data Raw: 37 66 66 38 0d 0a 68 70 6a 4d 74 45 56 34 55 6d 42 41 4f 6a 75 73 39 32 70 39 4d 37 74 68 7a 42 4c 65 6b 59 6f 72 71 63 72 73 35 5a 51 54 5a 36 6a 6d 35 78 33 63 65 77 31 43 7a 4d 2f 59 70 71 6c 55 51 6a 45 6b 6a 37 79 4c 75 55 49 76 53 4f 47 79 50 43 42 56 67 75 6d 75 51 41 79 6d 73 50 2f 76 76 62 2b 58 6e 37 71 4b 4b 68 70 65 62 48 77 52 34 52 32 52 61 41 2f 59 34 39 73 76 51 57 2f 66 61 54 67 69 66 61 4b 49 43 43 4b 43 4f 75 4b 34 62 57 4a 5a 6c 6d 6a 61 71 45 79 6d 4d 69 71 35 62 44 4d 62 32 4f 71 75 33 36 37 73 54 4c 79 70 71 4d 6c 6c 4f 47 2f 69 67 76 77 6e 43 32 7a 34 75 79 35 37 41 65 52 73 6c 57 75 71 64 58 76 47 50 74 49 77 67 30 46 57 65 76 63 71 56 70 30 49 68 36 65 54 42 49 2b 64 37 2f 70 79 4e 43 65 31 56 5a 47 53 64 4b 49 4d 54 45 45 42 6d Data Ascii: 7ff8hpjMtEV4UmBAOjus92p9M7thzBLekYorqcrs5ZQTZ6jm5x3cew1CzM/YpqlUQjEkj7yLuUIvSOGyPCBVgumuQAymsP/vvb+Xn7qKKhpebHwR4R2RaA/Y49svQW/faTgifaKICCKCOuK4bWJZlmjaqEymMiq5bDMb2Oqu367sTLypqMllOG/igvwnC2z4uy57AeRslWuqdXvGPtIwg0FWevcqVp0Ih6eTBI+d7/pyNCe1VZGSdKIMTEEBm

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:35 UTC	676	OUT	GET /assets/cdn/portal/styles/theme.css HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:35 UTC	5803	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:35 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1128647 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: 132b7410-42a8-49fb-a129-13e4e3b8da10 Etag: "ff6ae4e5d7d23f6d814836c2f5287b9acc2b08055fa27196846d0c70696c6163" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 41 X-Trace-Id: 00-f5f63d8a55a113e2f22d0be02279d99a-ffba1f5dbc06f1f1-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:35 UTC	9680	IN	Data Raw: ef bb bf 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 6d 61 69 6e 7b 64 69 73 70 Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{display:-webkit-box;display:-ms-flexbox;display:flex;flex-direction:column;height:100vh;word-break:break-word}main{disp
2024-09-19 09:50:35 UTC	1135	IN	Data Raw: 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 69 6e 69 74 69 61 6c 69 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 Data Ascii: st-style:none}.list-inline-item{display:inline-block}.list-inline-item:not(:last-child){margin-right:.5rem}.initialism{font-size:87.5%;text-transform:uppercase}.blockquote{margin-bottom:.5rem}.blockquote>:last-child{margin-bottom:0}.blockquote-footer{marg
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 34 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 33 32 30 70 78 7d 7d 2e 72 6f 77 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 3b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a Data Ascii: x){.container,.container-lg,.container-md,.container-sm,.container-xl{max-width:1140px}}@media (min-width: 1400px){.container,.container-lg,.container-md,.container-sm,.container-xl,.container-xxl{max-width:1320px}}.row{--bs-gutter-x:1.5rem;--bs-gutter-y:
2024-09-19 09:50:35 UTC	1514	IN	Data Raw: 32 2c 2e 67 79 2d 6c 67 2d 33 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 32 72 65 6d 7d 2e 67 2d 6c 67 2d 33 36 2c 2e 67 78 2d 6c 67 2d 33 36 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 32 2e 32 35 72 65 6d 7d 2e 67 2d 6c 67 2d 33 36 2c 2e 67 79 2d 6c 67 2d 33 36 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 32 2e 32 35 72 65 6d 7d 2e 67 2d 6c 67 2d 34 30 2c 2e 67 78 2d 6c 67 2d 34 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 32 2e 35 72 65 6d 7d 2e 67 2d 6c 67 2d 34 30 2c 2e 67 79 2d 6c 67 2d 34 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 32 2e 35 72 65 6d 7d 2e 67 2d 6c 67 2d 34 34 2c 2e 67 78 2d 6c 67 2d 34 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 32 2e 37 35 72 65 6d 7d 2e 67 2d 6c 67 2d 34 34 2c 2e 67 79 2d 6c 67 2d 34 34 7b 2d 2d Data Ascii: 2,.gy-lg-32{--bs-gutter-y:2rem}.g-lg-36,.gx-lg-36{--bs-gutter-x:2.25rem}.g-lg-36,.gy-lg-36{--bs-gutter-y:2.25rem}.g-lg-40,.gx-lg-40{--bs-gutter-x:2.5rem}.g-lg-40,.gy-lg-40{--bs-gutter-y:2.5rem}.g-lg-44,.gx-lg-44{--bs-gutter-x:2.75rem}.g-lg-44,.gy-lg-44{--
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 72 2d 78 3a 36 2e 37 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 30 38 2c 2e 67 79 2d 6c 67 2d 31 30 38 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 36 2e 37 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 31 32 2c 2e 67 78 2d 6c 67 2d 31 31 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 37 72 65 6d 7d 2e 67 2d 6c 67 2d 31 31 32 2c 2e 67 79 2d 6c 67 2d 31 31 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 37 72 65 6d 7d 2e 67 2d 6c 67 2d 31 31 36 2c 2e 67 78 2d 6c 67 2d 31 31 36 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 37 2e 32 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 31 36 2c 2e 67 79 2d 6c 67 2d 31 31 36 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 37 2e 32 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 32 30 2c 2e 67 78 2d 6c 67 2d 31 32 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 Data Ascii: r-x:6.75rem}.g-lg-108,.gy-lg-108{--bs-gutter-y:6.75rem}.g-lg-112,.gx-lg-112{--bs-gutter-x:7rem}.g-lg-112,.gy-lg-112{--bs-gutter-y:7rem}.g-lg-116,.gx-lg-116{--bs-gutter-x:7.25rem}.g-lg-116,.gy-lg-116{--bs-gutter-y:7.25rem}.g-lg-120,.gx-lg-120{--bs-gutter-x
2024-09-19 09:50:35 UTC	7435	IN	Data Raw: 6f 72 3a 23 65 39 65 63 65 66 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 65 6e 64 2d 77 69 64 74 68 3a 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: or:#e9ecef;pointer-events:none;border:0 solid;border-color:inherit;border-inline-end-width:1px;border-radius:0;-webkit-transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;transition
2024-09-19 09:50:35 UTC	8949	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 7b 2e 66 6f 72 6d 2d 72 61 6e 67 Data Ascii: ound-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;appearance:none}@media (prefers-reduced-motion: reduce){.form-rang
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 6f 74 28 5b 73 69 7a 65 5d 29 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 69 6e 76 61 6c 69 64 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 5b 73 69 7a 65 3d 22 31 22 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 2e 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 73 74 72 6f 6b 65 3d 27 25 32 33 33 34 33 61 34 30 27 20 73 74 72 Data Ascii: ot([size]),.was-validated .form-select:invalid:not([multiple])[size="1"]{padding-right:5.5rem;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16'%3E%3Cpath fill='none' stroke='%23343a40' str
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 6e 65 2d 64 61 6e 67 65 72 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 73 68 6f 77 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 73 68 6f 77 2e 63 63 2d 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 32 34 36 2c 38 30 2c 38 30 2c 30 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 6f Data Ascii: ne-danger:focus,.btn-outline-danger.active:focus,.btn-outline-danger.dropdown-toggle.show:focus,.btn-outline-danger.show.cc-dropdown-toggle:focus,.btn-outline-danger:active:focus{box-shadow:0 0 0 2px rgba(246,80,80,0.5)}.btn-outline-danger.disabled,.btn-o
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 65 78 62 6f 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 62 61 73 69 73 3a 61 75 74 6f 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 72 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6f 66 66 63 61 6e 76 61 73 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6f 66 66 63 61 6e 76 61 73 7b 70 6f 73 69 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 Data Ascii: exbox !important;display:flex !important;flex-basis:auto}.navbar-expand-md .navbar-toggler,.navbar-expand-md .offcanvas-header{display:none}.navbar-expand-md .offcanvas{position:inherit;bottom:0;z-index:1000;flex-grow:1;visibility:visible !important;backg

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:35 UTC	655	OUT	GET /assets/cdn/portal/vendor.js HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:35 UTC	5801	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:35 GMT Content-Type: application/javascript Content-Length: 924737 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: f828b0f7-0342-40ad-ab4b-07f86508ec3d Etag: "b4b5fcfa6de51d4e00428f071ade93ebf84d37a9c3ecf68a1e990741fc2a55e9" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 40 X-Trace-Id: 00-e82ea77539f67885e32e720eb07f0e79-6486b74d342d3a85-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:35 UTC	10583	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 2c 6f 3d 74 5b 30 5d 2c 6c 3d 74 5b 31 5d 2c 63 3d 74 5b 32 5d 2c 64 3d 30 2c 66 3d 5b 5d 3b 64 3c 6f 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 3d 6f 5b 64 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 69 29 26 26 61 5b 69 5d 26 26 66 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 61 5b 69 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 72 29 26 26 28 65 5b 72 5d 3d 6c 5b 72 5d 29 3b 66 6f 72 28 75 26 26 75 28 74 29 3b 66 2e 6c 65 6e 67 74 68 3b 29 66 2e 73 68 Data Ascii: !function(e){function t(t){for(var r,i,o=t[0],l=t[1],c=t[2],d=0,f=[];d<o.length;d++)i=o[d],Object.prototype.hasOwnProperty.call(a,i)&&a[i]&&f.push(a[i][0]),a[i]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(u&&u(t);f.length;)f.sh
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 29 7b 74 68 69 73 2e 5f 6c 6f 67 28 22 5c 6e 4b 65 79 3a 20 22 2e 63 6f 6e 63 61 74 28 22 22 3d 3d 3d 6e 3f 22 2d 22 3a 6e 29 29 3b 76 61 72 20 79 3d 66 2e 73 65 61 72 63 68 28 6f 29 3b 69 66 28 74 68 69 73 2e 5f 6c 6f 67 28 27 46 75 6c 6c 20 74 65 78 74 3a 20 22 27 2e 63 6f 6e 63 61 74 28 6f 2c 27 22 2c 20 73 63 6f 72 65 3a 20 27 29 2e 63 6f 6e 63 61 74 28 79 2e 73 63 6f 72 65 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 6b 65 6e 69 7a 65 29 7b 66 6f 72 28 76 61 72 20 45 3d 6f 2e 73 70 6c 69 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 6b 65 6e 53 65 70 61 72 61 74 6f 72 29 2c 77 3d 5b 5d 2c 4c 3d 30 3b 4c 3c 64 2e 6c 65 6e 67 74 68 3b 4c 2b 3d 31 29 7b 76 61 72 20 5f 3d 64 5b 4c 5d 3b 74 68 69 73 2e 5f 6c 6f 67 28 27 5c 6e 50 61 74 74 65 Data Ascii: ){this._log("\nKey: ".concat(""===n?"-":n));var y=f.search(o);if(this._log('Full text: "'.concat(o,'", score: ').concat(y.score)),this.options.tokenize){for(var E=o.split(this.options.tokenSeparator),w=[],L=0;L<d.length;L+=1){var _=d[L];this._log('\nPatte
2024-09-19 09:50:35 UTC	19	IN	Data Raw: 3b 22 29 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: ;")},Z=function(){v
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 74 72 69 6d 28 29 3b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 3b 66 6f 72 28 76 61 72 20 72 3d 65 2e 63 68 69 6c 64 72 65 6e 5b 30 5d 3b 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 72 65 74 75 72 6e 20 72 7d 7d 28 29 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 76 61 6c 75 65 2c 72 3d 65 2e 6c 61 62 65 6c 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 3a 72 2c 6f 3d 74 2e 76 61 6c 75 65 2c 61 3d 74 2e 6c 61 62 65 6c 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 6f 3a 61 Data Ascii: ar e=document.createElement("div");return function(t){var n=t.trim();e.innerHTML=n;for(var r=e.children[0];e.firstChild;)e.removeChild(e.firstChild);return r}}(),G=function(e,t){var n=e.value,r=e.label,i=void 0===r?n:r,o=t.value,a=t.label,s=void 0===a?o:a
2024-09-19 09:50:35 UTC	4805	IN	Data Raw: 73 73 4e 61 6d 65 3a 72 2b 22 20 22 2b 69 7d 29 3b 72 65 74 75 72 6e 20 67 26 26 76 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 61 29 2c 6d 26 26 76 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6c 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 66 3e 30 3f 22 74 72 65 65 69 74 65 6d 22 3a 22 6f 70 74 69 6f 6e 22 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 76 2e 64 61 74 61 73 65 74 2c 7b 63 68 6f 69 63 65 3a 22 22 2c 69 64 3a 63 2c 76 61 6c 75 65 3a 64 2c 73 65 6c 65 63 74 54 65 78 74 3a 6e 7d 29 2c 68 3f 28 76 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 73 29 2c 76 2e 64 61 74 61 73 65 74 2e 63 68 6f 69 63 65 44 69 73 61 62 6c 65 64 3d 22 22 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c Data Ascii: ssName:r+" "+i});return g&&v.classList.add(a),m&&v.classList.add(l),v.setAttribute("role",f>0?"treeitem":"option"),Object.assign(v.dataset,{choice:"",id:c,value:d,selectText:n}),h?(v.classList.add(s),v.dataset.choiceDisabled="",v.setAttribute("aria-disabl
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 61 6c 75 65 7c 7c 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 29 2c 63 75 73 74 6f 6d 50 72 6f 70 65 72 74 69 65 73 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 29 7d 29 7d 29 2c 74 68 69 73 2e 5f 72 65 6e 64 65 72 3d 74 68 69 73 2e 5f 72 65 6e 64 65 72 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 6f 6e 46 6f 63 75 73 3d 74 68 69 73 2e 5f 6f 6e 46 6f 63 75 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 6f 6e 42 6c 75 72 3d 74 68 69 73 2e 5f 6f 6e 42 6c 75 72 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 6f 6e 4b 65 79 55 70 3d 74 68 69 73 2e 5f 6f 6e 4b 65 79 55 70 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e Data Ascii: alue\|\|e.hasAttribute("placeholder"),customProperties:e.getAttribute("data-custom-properties")})}),this._render=this._render.bind(this),this._onFocus=this._onFocus.bind(this),this._onBlur=this._onBlur.bind(this),this._onKeyUp=this._onKeyUp.bind(this),this.
2024-09-19 09:50:35 UTC	1719	IN	Data Raw: 4e 5f 4b 45 59 2c 79 3d 69 7c 7c 6f 3b 21 74 68 69 73 2e 5f 69 73 54 65 78 74 45 6c 65 6d 65 6e 74 26 26 2f 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 20 5d 2f 2e 74 65 73 74 28 64 29 26 26 74 68 69 73 2e 73 68 6f 77 44 72 6f 70 64 6f 77 6e 28 29 3b 76 61 72 20 45 3d 28 74 3d 7b 7d 2c 74 5b 68 5d 3d 74 68 69 73 2e 5f 6f 6e 41 4b 65 79 2c 74 5b 70 5d 3d 74 68 69 73 2e 5f 6f 6e 45 6e 74 65 72 4b 65 79 2c 74 5b 67 5d 3d 74 68 69 73 2e 5f 6f 6e 45 73 63 61 70 65 4b 65 79 2c 74 5b 6d 5d 3d 74 68 69 73 2e 5f 6f 6e 44 69 72 65 63 74 69 6f 6e 4b 65 79 2c 74 5b 62 5d 3d 74 68 69 73 2e 5f 6f 6e 44 69 72 65 63 74 69 6f 6e 4b 65 79 2c 74 5b 76 5d 3d 74 68 69 73 2e 5f 6f 6e 44 69 72 65 63 74 69 6f 6e 4b 65 79 2c 74 5b 43 5d 3d 74 68 69 73 2e 5f 6f 6e 44 69 72 65 63 74 69 6f Data Ascii: N_KEY,y=i\|\|o;!this._isTextElement&&/[a-zA-Z0-9-_ ]/.test(d)&&this.showDropdown();var E=(t={},t[h]=this._onAKey,t[p]=this._onEnterKey,t[g]=this._onEscapeKey,t[m]=this._onDirectionKey,t[b]=this._onDirectionKey,t[v]=this._onDirectionKey,t[C]=this._onDirectio
2024-09-19 09:50:35 UTC	8949	IN	Data Raw: 6f 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 43 68 6f 69 63 65 41 63 74 69 6f 6e 28 72 2c 63 29 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 69 73 53 65 6c 65 63 74 4f 6e 65 45 6c 65 6d 65 6e 74 26 26 28 74 68 69 73 2e 73 68 6f 77 44 72 6f 70 64 6f 77 6e 28 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 2c 74 2e 5f 6f 6e 45 73 63 61 70 65 4b 65 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 68 61 73 41 63 74 69 76 65 44 72 6f 70 64 6f 77 6e 3b 74 26 26 28 74 68 69 73 2e 68 69 64 65 44 72 6f 70 64 6f 77 6e 28 21 30 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 4f 75 74 65 72 2e 66 6f 63 75 73 28 29 29 7d 2c 74 2e 5f 6f 6e 44 69 72 65 63 74 69 6f 6e 4b 65 79 3d 66 75 Data Ascii: o),this._handleChoiceAction(r,c)),t.preventDefault()}else this._isSelectOneElement&&(this.showDropdown(),t.preventDefault())},t._onEscapeKey=function(e){var t=e.hasActiveDropdown;t&&(this.hideDropdown(!0),this.containerOuter.focus())},t._onDirectionKey=fu
2024-09-19 09:50:35 UTC	7435	IN	Data Raw: 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 6e 65 72 2e 65 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 69 74 65 6d 4c 69 73 74 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 69 73 54 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 65 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 68 6f 69 63 65 4c 69 73 74 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 69 73 53 65 6c 65 63 74 4f 6e 65 45 6c 65 6d 65 6e 74 3f 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 65 61 72 63 68 45 6e 61 62 6c 65 64 26 26 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 65 6c 65 6d 65 6e 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 2e 69 6e 70 75 74 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 64 72 6f 70 64 Data Ascii: .containerInner.element.appendChild(this.itemList.element),this._isTextElement\|\|this.dropdown.element.appendChild(this.choiceList.element),this._isSelectOneElement?this.config.searchEnabled&&this.dropdown.element.insertBefore(this.input.element,this.dropd
2024-09-19 09:50:35 UTC	16384	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 2e 69 73 4f 62 6a 65 63 74 28 65 29 3f 6f 2e 66 6f 72 45 61 63 68 4b 65 79 49 6e 4b 65 79 70 61 74 68 28 65 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 2e 69 73 4f 62 6a 65 63 74 28 65 29 3f 65 5b 74 5d 3a 76 6f 69 64 20 30 7d 29 3a 76 6f 69 64 20 30 7d 2c 63 6f 6c 6c 65 63 74 46 6f 72 6d 56 61 6c 75 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 61 2c 73 2c 6c 2c 63 3d 7b 7d 3b 69 66 28 6f 2e 69 73 4a 71 75 65 72 79 45 6c 65 6d 65 6e 74 28 65 29 26 26 28 65 3d 65 5b 30 5d 29 2c 21 65 29 72 65 74 75 72 6e 20 63 3b 66 6f 72 28 74 3d 74 7c 7c 7b 7d 2c 61 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 6e 70 75 74 5b 6e 61 6d 65 Data Ascii: on(e,t){return o.isObject(e)?o.forEachKeyInKeypath(e,t,function(e,t){return o.isObject(e)?e[t]:void 0}):void 0},collectFormValues:function(e,t){var n,r,i,a,s,l,c={};if(o.isJqueryElement(e)&&(e=e[0]),!e)return c;for(t=t\|\|{},a=e.querySelectorAll("input[name

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:35 UTC	661	OUT	GET /assets/cdn/portal/scripts/head.js HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:35 UTC	5800	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:35 GMT Content-Type: application/javascript Content-Length: 22710 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: fa0cd345-6d14-42f4-9364-6c7c095960f9 Etag: "4eff530427144cb9839e3bfea0c31162d74a60a6b63416e97aefe66947a8044f" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 38 X-Trace-Id: 00-e10363eb255f05967be2fa840bdbc4fa-19812a2866e1daf1-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:35 UTC	10584	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{0:function(e,t,n){"use strict";function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDes
2024-09-19 09:50:35 UTC	12126	IN	Data Raw: 63 6b 28 65 2c 6e 2e 6c 6f 63 61 6c 65 2c 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3a 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 61 3d 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 2c 7b 6d 65 73 73 61 67 65 3a 6c 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3a 61 7d 7d 2c 74 2e 6d 65 72 69 64 69 61 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 74 69 6d 65 22 29 2c 74 3d 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 64 61 74 65 22 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 6d 26 26 65 2e 70 6d 3f 5b 65 2e 61 6d 2c 65 2e 70 6d 5d 3a 74 26 26 74 2e 6d 65 72 69 64 69 61 6e 3f 74 2e 6d 65 72 69 64 69 61 6e 3a 6d 2e 6d 65 72 69 64 69 61 6e 7d 2c 74 2e 70 72 65 70 61 72 65 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f Data Ascii: ck(e,n.locale,n.defaultValue):n.defaultValue,a=n.defaultValue),{message:l,translations:a}},t.meridian=function(){var e=this.lookup("time"),t=this.lookup("date");return e&&e.am&&e.pm?[e.am,e.pm]:t&&t.meridian?t.meridian:m.meridian},t.prepareOptions=functio

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Windows Analysis Report
https://rodator.freshdesk.com/en/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:35 UTC	727	OUT	GET /assets/cdn/portal/images/no-results.png HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:35 UTC	5787	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:35 GMT Content-Type: image/png Content-Length: 15368 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: 40cc014e-21dc-419a-b00d-f5a67720cf77 Etag: "c9556946153ff9272046871bd9303a00fed5ee409d9f43f9447de610a97eb816" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 41 X-Trace-Id: 00-16534f4839404239f44cb5c0042d1a0b-628a64717085177b-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:35 UTC	10597	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ef 00 00 00 ed 08 06 00 00 00 57 b8 22 b2 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 3b 9d 49 44 41 54 78 01 ed 9d 0b 98 14 e5 95 f7 4f d5 00 c3 55 66 16 2f a8 28 33 9a e8 80 28 17 8d ee 0a 59 06 88 26 11 0d 0d ee 9a b8 1b 05 62 f6 59 b3 5f 22 a0 46 20 f9 84 c1 7c 2b 60 a2 80 c9 26 e6 79 12 01 31 71 cd 46 66 30 d1 4d 8c c0 f0 29 ae b7 c0 20 44 f0 82 34 17 05 44 33 33 ca 65 b8 4c bd fb fe ab fb ed 7e ab ba aa bb ba bb aa fa 32 ef ef 79 86 e9 ee e9 ae 19 ba eb 5f e7 bc e7 9c f7 1c 22 85 42 51 92 68 d4 95 89 2c ac e1 ff d6 50 c9 63 b4 51 d3 f7 5b 48 d1 a5 e8 5a e2 8d 2c ac d7 75 7d 2c 63 ac Data Ascii: PNGIHDRW"pHYs%%IR$sRGBgAMAa;IDATxOUf/(3(Y&bY_"F \|+`&y1qFf0M) D4D33eL~2y_"BQh,PcQ[HZ,u},c
2024-09-19 09:50:35 UTC	4771	IN	Data Raw: 54 65 a5 da e1 e4 8f 3d 65 25 d3 4d d7 53 82 56 e8 e8 7f 30 7e f9 2c 96 2a 37 19 91 4b 77 22 5d 1e 3e 4c ec eb ef 0b cf 49 1f 3c de f7 b1 dc 3f 4c f3 6d bd 0b c2 8e 36 27 86 8e a9 76 38 f9 63 77 d3 65 17 ad 5b 45 ea 47 7b e1 c0 64 8a b1 18 77 4c 61 8d eb 74 5e 88 01 df 85 16 2e 48 5d f3 a6 77 9b 3f 94 2a b0 98 14 b0 f5 83 54 cb 1b 69 10 4d a2 6b e2 8f 44 b9 c5 6c 26 bf d0 ac 3d 9c bb 62 88 df 2f 46 d8 76 05 6d e6 ee a6 78 3f 4d f1 da 8a 7f 2e 3c 9b 7f b4 9b 93 f7 71 22 8e 08 a1 1e d8 2b 4f bb 6c 36 28 a6 01 df 76 97 fe c2 b3 d3 d7 5c 58 8a 38 a4 6e 32 7e 90 14 2f 17 ad ae f7 9a c1 2f 0f 33 53 0a a8 27 2f 8a 12 d3 96 19 4d b3 97 52 be 30 da c2 b5 6b 6e 4a 46 85 90 af 7b a4 ba 18 f6 0b 9f 3c da a5 5f 65 f7 94 ea 9f b3 fe a6 af e5 3e 2c 5d 31 89 77 97 43 e1 Data Ascii: Te=e%MSV0~,7Kw"]>LI<?Lm6'v8cwe[EG{dwLat^.H]w?TiMkDl&=b/Fvmx?M.<q"+Ol6(v\X8n2~//3S'/MR0knJF{<_e>,]1wC

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:35 UTC	707	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/156000042337/original/ScygnVARIycKyqMAYRdlwnsKCqKCnyhabg.png?1726639798 HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rodator.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 09:50:35 UTC	536	IN	HTTP/1.1 200 OK x-amz-id-2: 9Sp2sJ8ZceRe4q2uqFArfKXOWx2Ywp63pxl/XSmNsbtkEPBCDr/zoHmhBkx6311ORfACBs/AvCG9ZrFKfPkgd+jsaVKO8jJ9ndFuDWpFsdI= x-amz-request-id: ZDMW7086P55QP46G Date: Thu, 19 Sep 2024 09:50:36 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 18 Sep 2024 06:09:59 GMT ETag: "cc52ae0eb1d890837835dbe1b73e2799" x-amz-server-side-encryption: AES256 x-amz-version-id: 8.fKUu2znVJ4B9M9L1vgeJjT6k3j9fxs Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 16240 Connection: close
2024-09-19 09:50:35 UTC	15757	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a7 00 00 00 69 08 06 00 00 01 28 f3 03 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 3f 05 49 44 41 54 78 5e ed 5d 07 9c 54 d5 d5 7f 58 52 6c 30 65 57 ca ce 2e 20 46 25 d1 14 8c 15 e6 cd 0c c5 12 cb 97 28 51 63 d4 58 be 18 35 94 a9 bb a8 38 02 db 0b bb 4b 93 55 6c 18 4b 88 46 13 35 b1 7e d8 b1 00 22 2c 1d 44 50 8c 0a 0a 8a a2 d4 fd fe ff f3 ee 7d fb 66 76 76 59 10 91 c8 9c df ef ce dc 72 ee b9 e7 9e 7b 6e 7d b7 18 1a 16 19 f9 4f 2e 34 f2 9b 68 94 d7 d7 87 95 46 77 9b d8 6e 23 bc c0 f0 2d e0 3f 38 ee b1 34 03 d1 c5 19 fc 76 98 38 89 2e 34 8e 3a 94 88 ef 83 6b fe cf 37 f2 4b e7 1a 05 57 d0 Data Ascii: PNGIHDRi(sRGBgAMAapHYs+?IDATx^]TXRl0eW. F%(QcX58KUlKF5~",DP}fvvYr{n}O.4hFwn#-?84v8.4:k7KW
2024-09-19 09:50:35 UTC	483	IN	Data Raw: 3f 01 dd 10 77 12 4d 13 26 01 07 0f 8c e6 c2 bd 9c e3 35 ba 39 e1 e0 76 36 e0 9e 0f 9c 22 89 17 88 fc 0b ff 97 b0 4b 72 61 ac 23 9f 22 fd b1 1b 40 ff 26 77 28 7c 02 d2 e3 f7 74 d2 9d 44 03 9c 51 98 d5 1f 8f b1 d7 14 8f 3f 3c 1a 7e 55 42 8b df e1 cd c8 43 70 0f d5 2d 10 f2 90 80 1b 63 28 eb 04 a5 95 87 e8 ad b2 b4 82 3c 59 f1 22 d7 49 1a 5c 3b 44 be 19 5f f1 56 8c 31 55 10 0a 56 e9 f2 47 ee 40 58 83 c7 8c 1f 0f bc eb 11 f6 00 2b 34 ec 53 a1 74 97 66 6a d9 d3 95 53 14 be 77 f3 f9 6f 01 74 df 1c 37 2a 17 c6 9e c3 3a 75 3a f3 86 02 ce 62 95 57 33 70 3b a0 54 9a a6 d4 f5 60 f4 1a 9d 82 37 14 e8 a1 8c 06 ca 20 bd 65 d7 63 4e b6 84 7a 62 ca 32 e9 d8 f7 1a 17 c3 0e 85 4e 1c da ff 3a 0f c7 de aa cb 4e 49 8b f1 64 d2 08 be dd 27 0c 39 8c b8 87 98 11 af a6 e5 04 cf Data Ascii: ?wM&59v6"Kra#"@&w(\|tDQ?<~UBCp-c(<Y"I\;D_V1UVG@X+4StfjSwot7*:u:bW3p;T`7 ecNzb2N:NId'9

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:36 UTC	707	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/156000042240/original/MMjef9RUXi-8YPzDpvKV5xvtafYMsKgmlg.png?1726639697 HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rodator.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 09:50:36 UTC	535	IN	HTTP/1.1 200 OK x-amz-id-2: LD3Jpkkut3dUmvcoPVx+N4a2Q0bVFtTfpCZ4oYwgQVKgyaB74r6nL0NH/xKnrfwSjSJx8pLQsTeM0Cc8TbZE9oCbePnwrN70HbzOzJUl2k4= x-amz-request-id: CP9R1G1HBDRK515G Date: Thu, 19 Sep 2024 09:50:37 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 18 Sep 2024 06:08:18 GMT ETag: "51855df29155bc9632c8a20447823aa0" x-amz-server-side-encryption: AES256 x-amz-version-id: 9xeaddFOVXA0gaVdFljqxvXwQzsQ76Gy Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 2142 Connection: close
2024-09-19 09:50:36 UTC	1421	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 08 25 49 44 41 54 68 43 ed 98 79 50 57 55 14 c7 7f 3f 04 17 50 b6 00 c1 2c b7 cc 3d 6d 6c d4 12 c7 51 46 44 1a f7 34 c7 96 99 4a c7 62 2a 45 16 01 91 cd 00 65 53 c7 4c 53 d3 c6 dc 1a 25 53 29 c4 ca ea 0f 5b cd 65 72 c9 c6 b5 12 10 e1 c7 26 ae 2c 7d ce 9b f7 9c e7 13 f4 f1 07 c3 8f 19 de cc 9b f7 de 79 e7 9e 7b ce f9 9e 73 ee b9 d7 5a 31 a5 67 9d c5 c4 55 57 57 57 ea b6 f7 a2 67 5c 9e c5 66 b5 5a 3c 4c 0c b1 24 06 5a ac 66 f8 5a 79 cc 7b c0 da 0a 98 79 67 d9 03 67 2b 60 f6 80 42 23 74 68 05 ac 11 ce 6a 6a d6 b0 b0 b0 a1 56 ab 75 54 6d 6d ad 8b 9f 9f df 86 88 88 88 22 e3 9c cd 02 58 48 48 48 c7 f6 ed db 87 69 ca b0 3e e6 ae 58 b1 e2 b7 86 1c 12 15 15 15 Data Ascii: PNGIHDRl%IDAThCyPWU?P,=mlQFD4Jb*EeSLS%S)[er&,}y{sZ1gUWWWg\fZ<L$ZfZy{ygg+`B#thjjVuTmm"XHHHi>X
2024-09-19 09:50:36 UTC	721	IN	Data Raw: cb 0b 04 00 e8 d2 24 18 01 d3 f6 82 29 fc 5f 2c 9b 79 f8 b7 ab 6b a8 c2 8b ee 6f 01 d0 26 64 7d c9 bf c9 dc b9 94 e1 60 a3 2c 02 4b f1 39 15 64 2e 8d c9 c6 16 09 18 86 79 15 14 14 88 c3 65 81 cf c5 f8 09 3c 77 43 97 b5 cd 62 12 b0 b3 b0 3e fd b0 8d 34 eb 62 0c d9 90 0c df 7d 80 e1 44 a5 54 11 2c a5 74 8b 0f ac bd 5a 86 49 e6 00 ca 5a d1 49 4e 6c 3a 74 e8 f0 2a 7a 26 4a 37 27 34 00 f4 61 6d 4a 68 28 c3 b4 ce 57 78 d1 63 02 59 79 a0 45 02 26 06 68 7b 2e 5d 44 2a 25 a3 11 80 29 9d 1b 0d 40 39 1b f1 ee ac 83 65 9a 2c de 3d 71 8e ad 21 c0 f4 6b 18 63 ee cd 2b e3 75 eb a9 d2 4d d2 a0 1c d6 b7 f8 54 87 c1 5a a7 eb ec ec 3c 82 ad c6 20 c0 d8 a0 ce 3d 00 1b 4e 6b 7a 10 17 52 aa b3 54 c0 7a 4b 19 6d 08 30 82 e4 38 c1 30 98 00 cc 20 13 23 94 60 b6 d8 49 49 14 65 58 Data Ascii: $)_,yko&d}`,K9d.ye<wCb>4b}DT,tZIZINl:tz&J7'4amJh(WxcYyE&h{.]D%)@9e,=q!kc+uMTZ< =NkzRTzKm080 #`IIeX

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:37 UTC	413	OUT	GET /assets/cdn/portal/images/no-results.png HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:37 UTC	5787	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:37 GMT Content-Type: image/png Content-Length: 15368 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: e2d604be-ccf7-4520-8d81-1ed46c1050f9 Etag: "c9556946153ff9272046871bd9303a00fed5ee409d9f43f9447de610a97eb816" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 43 X-Trace-Id: 00-87d759ecdd6f47dd2068d20e0d0064b6-f99c9ec823a69573-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:37 UTC	10597	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ef 00 00 00 ed 08 06 00 00 00 57 b8 22 b2 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 3b 9d 49 44 41 54 78 01 ed 9d 0b 98 14 e5 95 f7 4f d5 00 c3 55 66 16 2f a8 28 33 9a e8 80 28 17 8d ee 0a 59 06 88 26 11 0d 0d ee 9a b8 1b 05 62 f6 59 b3 5f 22 a0 46 20 f9 84 c1 7c 2b 60 a2 80 c9 26 e6 79 12 01 31 71 cd 46 66 30 d1 4d 8c c0 f0 29 ae b7 c0 20 44 f0 82 34 17 05 44 33 33 ca 65 b8 4c bd fb fe ab fb ed 7e ab ba aa bb ba bb aa fa 32 ef ef 79 86 e9 ee e9 ae 19 ba eb 5f e7 bc e7 9c f7 1c 22 85 42 51 92 68 d4 95 89 2c ac e1 ff d6 50 c9 63 b4 51 d3 f7 5b 48 d1 a5 e8 5a e2 8d 2c ac d7 75 7d 2c 63 ac Data Ascii: PNGIHDRW"pHYs%%IR$sRGBgAMAa;IDATxOUf/(3(Y&bY_"F \|+`&y1qFf0M) D4D33eL~2y_"BQh,PcQ[HZ,u},c
2024-09-19 09:50:37 UTC	4771	IN	Data Raw: 54 65 a5 da e1 e4 8f 3d 65 25 d3 4d d7 53 82 56 e8 e8 7f 30 7e f9 2c 96 2a 37 19 91 4b 77 22 5d 1e 3e 4c ec eb ef 0b cf 49 1f 3c de f7 b1 dc 3f 4c f3 6d bd 0b c2 8e 36 27 86 8e a9 76 38 f9 63 77 d3 65 17 ad 5b 45 ea 47 7b e1 c0 64 8a b1 18 77 4c 61 8d eb 74 5e 88 01 df 85 16 2e 48 5d f3 a6 77 9b 3f 94 2a b0 98 14 b0 f5 83 54 cb 1b 69 10 4d a2 6b e2 8f 44 b9 c5 6c 26 bf d0 ac 3d 9c bb 62 88 df 2f 46 d8 76 05 6d e6 ee a6 78 3f 4d f1 da 8a 7f 2e 3c 9b 7f b4 9b 93 f7 71 22 8e 08 a1 1e d8 2b 4f bb 6c 36 28 a6 01 df 76 97 fe c2 b3 d3 d7 5c 58 8a 38 a4 6e 32 7e 90 14 2f 17 ad ae f7 9a c1 2f 0f 33 53 0a a8 27 2f 8a 12 d3 96 19 4d b3 97 52 be 30 da c2 b5 6b 6e 4a 46 85 90 af 7b a4 ba 18 f6 0b 9f 3c da a5 5f 65 f7 94 ea 9f b3 fe a6 af e5 3e 2c 5d 31 89 77 97 43 e1 Data Ascii: Te=e%MSV0~,7Kw"]>LI<?Lm6'v8cwe[EG{dwLat^.H]w?TiMkDl&=b/Fvmx?M.<q"+Ol6(v\X8n2~//3S'/MR0knJF{<_e>,]1wC

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:37 UTC	808	OUT	GET /support/recaptcha HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:37 UTC	1044	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate X-Ratelimit-Limit: 300 X-Ratelimit-Reset: 190924095137 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ratelimit-Remaining: 299 X-Xss-Protection: 1; mode=block X-Request-Id: 7acf96ba-b0f8-44f1-8e5a-b6a9c1e802fd Etag: W/"1d0562c9d5cc0ada15376281a5a04e61" X-Content-Type-Options: nosniff X-Fw-Ratelimiting-Managed: true X-Ratelimit-Total: 1000 X-Ratelimit-Remaining: 999 X-Ratelimit-Used-Currentrequest: 1 X-Envoy-Upstream-Service-Time: 76 X-Trace-Id: 00-6ebc143b378af508ec82520794820ae0-556e2a16ce344c8d-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:37 UTC	2994	IN	Data Raw: 62 61 62 0d 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 3e 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 2f 72 65 63 61 70 74 63 68 61 2f 65 6e 74 65 72 70 72 69 73 65 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 Data Ascii: bab<!DOCTYPE html><html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/></head><body> <div id="recaptcha"></div> <script src='https://www.recaptcha.net/recaptcha/enterprise.js'></script> <script ty
2024-09-19 09:50:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:37 UTC	673	OUT	GET /assets/cdn/portal/styles/fonts/icomoon.ttf?qilaa4 HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://rodator.freshdesk.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://rodator.freshdesk.com/assets/cdn/portal/styles/theme.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:37 UTC	5800	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:37 GMT Content-Type: application/x-font-ttf Content-Length: 19364 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: 8e9b3644-58c6-4596-a375-d052da0c1ec8 Etag: "0774bb03bd2dff7facab0280e32a9e15ab9afa79bac829ff71ae64ea352a3490" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 41 X-Trace-Id: 00-0075447671d8095d5256e0212c1a1f23-ccd97d45fa776247-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:37 UTC	10584	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 06 70 00 00 00 bc 00 00 00 60 63 6d 61 70 17 56 d2 c3 00 00 01 1c 00 00 00 54 67 61 73 70 00 00 00 10 00 00 01 70 00 00 00 08 67 6c 79 66 5b 07 d3 d4 00 00 01 78 00 00 46 80 68 65 61 64 21 9d 48 a3 00 00 47 f8 00 00 00 36 68 68 65 61 09 aa 06 00 00 00 48 30 00 00 00 24 68 6d 74 78 fe 65 08 1b 00 00 48 54 00 00 01 04 6c 6f 63 61 0a a2 1b 8e 00 00 49 58 00 00 00 84 6d 61 78 70 00 85 01 d0 00 00 49 dc 00 00 00 20 6e 61 6d 65 99 4a 09 fb 00 00 49 fc 00 00 01 86 70 6f 73 74 00 03 00 00 00 00 4b 84 00 00 00 20 00 03 04 0a 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e9 Data Ascii: 0OS/2p`cmapVTgasppglyf[xFhead!HG6hheaH0$hmtxeHTlocaIXmaxpI nameJIpostK 3@
2024-09-19 09:50:37 UTC	234	IN	Data Raw: 35 26 27 2e 01 27 26 2f 01 2e 01 23 31 22 26 23 22 06 07 31 0e 01 15 14 16 17 27 2e 01 23 22 06 07 31 0e 01 15 31 38 01 15 14 16 1f 01 23 26 22 23 22 06 15 14 16 17 35 1e 01 17 33 0e 01 23 22 26 23 33 22 26 23 22 06 07 31 0e 01 15 14 16 17 33 16 17 1e 01 17 16 33 30 32 39 01 3a 01 33 32 37 3e 01 37 36 37 31 36 37 3e 01 37 36 35 34 30 35 31 3e 01 3f 01 3e 01 35 34 26 27 31 07 0e 01 15 1c 01 15 31 1c 01 15 14 07 0e 01 07 06 07 31 06 07 0e 01 07 06 23 22 26 23 33 38 01 31 22 26 27 17 3e 01 37 07 3e 01 35 34 26 23 30 22 39 01 2a 01 23 22 26 27 17 3e 01 37 31 3e 01 35 34 26 27 31 2e 01 27 31 3e 01 37 07 3e 01 37 35 3c 01 35 34 26 27 31 2e 01 35 34 36 37 31 16 17 1e 01 17 16 17 33 3a 01 33 32 36 37 Data Ascii: 5&'.'&/.#1"&#"1'.#"118#&"#"53#"&#3"&#"133029:327>767167>7654051>?>54&'111#"&#381"&'>7>54&#0"9*#"&'>71>54&'1.'1>7>75<54&'1.546713:3267
2024-09-19 09:50:37 UTC	8546	IN	Data Raw: 31 3e 01 35 3c 01 27 31 2e 01 35 34 36 37 15 3e 01 37 33 3e 01 33 32 16 17 31 1e 01 17 31 3a 01 33 32 36 37 07 0e 01 07 15 0e 01 15 14 16 17 31 1e 01 33 32 36 33 31 33 0e 01 07 23 03 f1 06 0f 09 05 0a 04 02 05 03 05 05 1a 13 05 0a 04 12 2a 17 01 1c 4c 2b 0b 16 0b 02 31 4f 19 01 15 19 01 2b 28 27 43 1b 1b 14 01 06 14 0c 01 03 01 0c 13 05 12 14 0f 0e 01 04 0b 05 06 0a 04 0a 0d 3b 30 01 0b 02 04 03 12 1a 01 01 10 43 2c 01 18 36 1d 07 0e 07 01 01 02 01 0f 17 05 02 01 0b 09 01 21 26 25 50 2b 2a 2d 02 03 06 03 3f 3b 3c 6c 31 30 29 24 1e 1d 29 0a 0b 1d 2c 0e 01 01 01 09 08 90 08 0a 09 09 23 18 19 1f 22 29 28 5c 32 32 34 04 09 04 01 25 46 21 03 2a 49 20 01 08 0a 1a 13 01 02 03 02 22 41 1f 04 14 22 0f 07 07 13 0e 25 3f 18 12 21 10 03 0d 10 02 0a 09 19 1d 01 01 1f Data Ascii: 1>5<'1.5467>73>3211:32671326313#L+1O+('C;0C,6!&%P+-?;<l10)$),#")(\224%F!*I "A"%?!

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:37 UTC	663	OUT	GET /assets/cdn/portal/scripts/bottom.js HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:37 UTC	5801	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:37 GMT Content-Type: application/javascript Content-Length: 123826 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: b016e0d0-30f6-486f-b6b2-ee766fde5b9e Etag: "636b17a9c7f3688fc3e53cf30aeb6d43518fe7e48f4b69ba012aaf052ded2566" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 36 X-Trace-Id: 00-b2e51e41c44eadedcb4cc995a135cc0b-f30ccbe644124163-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:37 UTC	10583	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[40],{0:function(e,t,n){"use strict";function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDes
2024-09-19 09:50:37 UTC	16384	IN	Data Raw: 79 43 61 63 68 65 3a 28 24 28 65 29 2c 79 28 74 2c 6f 2e 6c 6f 61 64 65 64 43 6c 61 73 73 29 2c 62 28 74 2c 6f 2e 6c 6f 61 64 69 6e 67 43 6c 61 73 73 29 2c 77 28 74 2c 47 29 2c 76 6f 69 64 20 78 28 74 2c 22 6c 61 7a 79 6c 6f 61 64 65 64 22 29 29 7d 2c 51 3d 6a 28 56 29 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 51 28 7b 74 61 72 67 65 74 3a 65 2e 74 61 72 67 65 74 7d 29 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 6f 61 64 2d 6d 6f 64 65 22 29 7c 7c 6f 2e 69 66 72 61 6d 65 4c 6f 61 64 4d 6f 64 65 3b 30 3d 3d 6e 3f 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 74 29 3a 31 3d 3d 6e 26 26 28 65 2e 73 72 63 3d 74 Data Ascii: yCache:($(e),y(t,o.loadedClass),b(t,o.loadingClass),w(t,G),void x(t,"lazyloaded"))},Q=j(V),G=function(e){Q({target:e.target})},K=function(e,t){var n=e.getAttribute("data-load-mode")\|\|o.iframeLoadMode;0==n?e.contentWindow.location.replace(t):1==n&&(e.src=t
2024-09-19 09:50:37 UTC	19	IN	Data Raw: 61 75 6c 74 7d 2c 6e 29 2c 6f 72 69 67 69 6e 61 6c 50 72 Data Ascii: ault},n),originalPr
2024-09-19 09:50:37 UTC	16384	IN	Data Raw: 6f 70 65 72 74 69 65 73 3a 74 2c 6f 72 69 67 69 6e 61 6c 4f 70 74 69 6f 6e 73 3a 6e 2c 73 74 61 72 74 54 69 6d 65 3a 43 74 7c 7c 51 28 29 2c 64 75 72 61 74 69 6f 6e 3a 6e 2e 64 75 72 61 74 69 6f 6e 2c 74 77 65 65 6e 73 3a 5b 5d 2c 63 72 65 61 74 65 54 77 65 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 41 65 2e 54 77 65 65 6e 28 65 2c 75 2e 6f 70 74 73 2c 74 2c 6e 2c 75 2e 6f 70 74 73 2e 73 70 65 63 69 61 6c 45 61 73 69 6e 67 5b 74 5d 7c 7c 75 2e 6f 70 74 73 2e 65 61 73 69 6e 67 29 3b 72 65 74 75 72 6e 20 75 2e 74 77 65 65 6e 73 2e 70 75 73 68 28 72 29 2c 72 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 30 2c 72 3d 74 3f 75 2e 74 77 65 65 6e 73 2e 6c 65 6e 67 74 68 3a 30 3b 69 66 28 6f 29 72 65 74 75 72 Data Ascii: operties:t,originalOptions:n,startTime:Ct\|\|Q(),duration:n.duration,tweens:[],createTween:function(t,n){var r=Ae.Tween(e,u.opts,t,n,u.opts.specialEasing[t]\|\|u.opts.easing);return u.tweens.push(r),r},stop:function(t){var n=0,r=t?u.tweens.length:0;if(o)retur
2024-09-19 09:50:37 UTC	4805	IN	Data Raw: 3a 78 22 29 2c 49 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 45 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 79 65 2e 74 65 73 74 28 52 3d 4d 2e 6d 61 74 63 68 65 73 7c 7c 4d 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 4d 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 4d 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 4d 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 6f 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 45 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 52 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 2c 52 2e 63 61 6c 6c 28 65 2c 22 5b 73 21 3d 27 27 5d 3a 78 22 29 2c 50 2e 70 75 73 68 28 22 21 3d 22 2c 61 65 29 7d 29 2c 49 3d 49 2e 6c 65 6e 67 74 68 26 26 6e 65 Data Ascii: :x"),I.push(",.:")})),(E.matchesSelector=ye.test(R=M.matches\|\|M.webkitMatchesSelector\|\|M.mozMatchesSelector\|\|M.oMatchesSelector\|\|M.msMatchesSelector))&&o(function(e){E.disconnectedMatch=R.call(e,""),R.call(e,"[s!='']:x"),P.push("!=",ae)}),I=I.length&&ne
2024-09-19 09:50:37 UTC	8949	IN	Data Raw: 7c 28 62 3d 70 3d 30 29 7c 7c 68 2e 70 6f 70 28 29 29 26 26 28 28 73 3f 64 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 76 3a 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 29 7c 7c 21 2b 2b 62 7c 7c 28 79 26 26 28 66 3d 64 5b 5f 5d 7c 7c 28 64 5b 5f 5d 3d 7b 7d 29 2c 6c 3d 66 5b 64 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 66 5b 64 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6c 5b 65 5d 3d 5b 46 2c 62 5d 29 2c 64 21 3d 3d 74 29 29 3b 29 3b 72 65 74 75 72 6e 20 62 2d 3d 6f 2c 62 3d 3d 3d 72 7c 7c 62 25 72 3d 3d 3d 30 26 26 62 2f 72 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 6f 2c 69 3d 54 2e 70 73 65 75 64 6f 73 5b 65 5d 7c 7c 54 2e 73 65 74 46 69 6c 74 65 72 73 5b 65 2e 74 6f Data Ascii: \|(b=p=0)\|\|h.pop())&&((s?d.nodeName.toLowerCase()!==v:1!==d.nodeType)\|\|!++b\|\|(y&&(f=d[_]\|\|(d[_]={}),l=f[d.uniqueID]\|\|(f[d.uniqueID]={}),l[e]=[F,b]),d!==t)););return b-=o,b===r\|\|b%r===0&&b/r>=0}}},PSEUDO:function(e,n){var o,i=T.pseudos[e]\|\|T.setFilters[e.to
2024-09-19 09:50:37 UTC	8949	IN	Data Raw: 6e 29 7c 7c 69 2e 70 75 73 68 28 6e 29 3a 6e 26 26 6e 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 73 28 6e 29 26 26 72 28 6e 29 7d 29 7d 28 61 72 67 75 6d 65 6e 74 73 29 2c 6e 26 26 21 74 26 26 75 28 29 29 2c 74 68 69 73 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 65 2e 65 61 63 68 28 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3b 28 6e 3d 41 65 2e 69 6e 41 72 72 61 79 28 74 2c 69 2c 6e 29 29 3e 2d 31 3b 29 69 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 63 3e 3d 6e 26 26 63 2d 2d 7d 29 2c 74 68 69 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 41 65 2e 69 6e 41 72 72 61 79 28 65 2c 69 29 3e 2d 31 3a 69 2e 6c 65 6e Data Ascii: n)\|\|i.push(n):n&&n.length&&"string"!==s(n)&&r(n)})}(arguments),n&&!t&&u()),this},remove:function(){return Ae.each(arguments,function(e,t){for(var n;(n=Ae.inArray(t,i,n))>-1;)i.splice(n,1),c>=n&&c--}),this},has:function(e){return e?Ae.inArray(e,i)>-1:i.len
2024-09-19 09:50:37 UTC	8949	IN	Data Raw: 65 2e 67 75 69 64 2b 2b 29 2c 28 63 3d 67 2e 65 76 65 6e 74 73 29 7c 7c 28 63 3d 67 2e 65 76 65 6e 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 29 2c 28 61 3d 67 2e 68 61 6e 64 6c 65 29 7c 7c 28 61 3d 67 2e 68 61 6e 64 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 41 65 26 26 41 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 65 64 21 3d 3d 74 2e 74 79 70 65 3f 41 65 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 3a 76 6f 69 64 20 30 7d 29 2c 74 3d 28 74 7c 7c 22 22 29 2e 6d 61 74 63 68 28 7a 65 29 7c 7c 5b 22 22 5d 2c 75 3d 74 2e 6c 65 6e 67 74 68 3b 75 2d 2d 3b 29 73 3d 75 74 2e 65 78 65 63 28 74 5b 75 5d Data Ascii: e.guid++),(c=g.events)\|\|(c=g.events=Object.create(null)),(a=g.handle)\|\|(a=g.handle=function(t){return"undefined"!=typeof Ae&&Ae.event.triggered!==t.type?Ae.event.dispatch.apply(e,arguments):void 0}),t=(t\|\|"").match(ze)\|\|[""],u=t.length;u--;)s=ut.exec(t[u]
2024-09-19 09:50:37 UTC	7435	IN	Data Raw: 56 69 65 77 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 6f 70 65 6e 65 72 7c 7c 28 74 3d 6e 29 2c 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 7d 2c 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 7b 7d 3b 66 6f 72 28 6f 20 69 6e 20 74 29 69 5b 6f 5d 3d 65 2e 73 74 79 6c 65 5b 6f 5d 2c 65 2e 73 74 79 6c 65 5b 6f 5d 3d 74 5b 6f 5d 3b 72 3d 6e 2e 63 61 6c 6c 28 65 29 3b 66 6f 72 28 6f 20 69 6e 20 74 29 65 2e 73 74 79 6c 65 5b 6f 5d 3d 69 5b 6f 5d 3b 72 65 74 75 72 6e 20 72 7d 2c 67 74 3d 6e 65 77 20 52 65 67 45 78 70 28 4b 65 2e 6a 6f 69 6e 28 22 7c 22 29 2c 22 69 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6c 29 7b 75 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 Data Ascii: View;return t&&t.opener\|\|(t=n),t.getComputedStyle(e)},mt=function(e,t,n){var r,o,i={};for(o in t)i[o]=e.style[o],e.style[o]=t[o];r=n.call(e);for(o in t)e.style[o]=i[o];return r},gt=new RegExp(Ke.join("\|"),"i");!function(){function e(){if(l){u.style.cssTex
2024-09-19 09:50:37 UTC	16384	IN	Data Raw: 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3d 55 65 2e 67 65 74 28 74 68 69 73 29 2c 72 3d 6e 5b 65 2b 22 71 75 65 75 65 22 5d 2c 6f 3d 6e 5b 65 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 5d 2c 69 3d 41 65 2e 74 69 6d 65 72 73 2c 61 3d 72 3f 72 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 6e 2e 66 69 6e 69 73 68 3d 21 30 2c 41 65 2e 71 75 65 75 65 28 74 68 69 73 2c 65 2c 5b 5d 29 2c 6f 26 26 6f 2e 73 74 6f 70 26 26 6f 2e 73 74 6f 70 2e 63 61 6c 6c 28 74 68 69 73 2c 21 30 29 2c 74 3d 69 2e 6c 65 6e 67 74 68 3b 74 2d 2d 3b 29 69 5b 74 5d 2e 65 6c 65 6d 3d 3d 3d 74 68 69 73 26 26 69 5b 74 5d 2e 71 75 65 75 65 3d 3d 3d 65 26 26 28 69 5b 74 5d 2e 61 6e 69 6d 2e 73 74 6f 70 28 21 30 29 2c 69 2e 73 70 6c 69 63 65 28 74 2c 31 29 29 3b 66 6f Data Ascii: .each(function(){var t,n=Ue.get(this),r=n[e+"queue"],o=n[e+"queueHooks"],i=Ae.timers,a=r?r.length:0;for(n.finish=!0,Ae.queue(this,e,[]),o&&o.stop&&o.stop.call(this,!0),t=i.length;t--;)i[t].elem===this&&i[t].queue===e&&(i[t].anim.stop(!0),i.splice(t,1));fo

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:37 UTC	667	OUT	GET /assets/cdn/portal/scripts/locales/en.js HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:37 UTC	5799	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:37 GMT Content-Type: application/javascript Content-Length: 3465 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: addb048d-d759-4a57-a6b2-cdd2ae1156a9 Etag: "92d8568cc12af7b7e4cff5fc25933630df59392182f9c076b44a28ad18c6547a" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 42 X-Trace-Id: 00-4dc7daefcccd50879aeb84ddfed42f1c-1f88bdc8061ea9b2-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:37 UTC	3465	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 5d 2c 7b 32 30 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 49 31 38 6e 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 7c 7c 28 49 31 38 6e 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3d 7b 7d 29 2c 49 31 38 6e 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 2e 65 6e 3d 49 31 38 6e 2e 65 78 74 65 6e 64 28 49 31 38 6e 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 2e 65 6e 7c 7c 7b 7d 2c 7b 65 6e 64 75 73 65 72 5f 6d 61 72 6b 65 74 70 6c 61 63 65 3a 7b 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 73 3a 7b 67 6c 6f 62 61 6c 3a 7b 65 6d 70 74 79 5f 6d 65 73 73 61 67 65 3a 22 54 68 65 20 6d 65 73 73 61 67 65 20 72 65 71 75 65 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[53],{208:function(e,t){I18n.translations\|\|(I18n.translations={}),I18n.translations.en=I18n.extend(I18n.translations.en\|\|{},{enduser_marketplace:{error_messages:{global:{empty_message:"The message reques

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:37 UTC	672	OUT	GET /assets/cdn/portal/scripts/single-solution.js HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:37 UTC	5800	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:37 GMT Content-Type: application/javascript Content-Length: 36810 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: ee6398eb-4cea-42be-a87c-4fe3d2858982 Etag: "b4815ddc9e44e8a4445ba01631f8600c74297fe84f11a42ccc119a8f0e965d2b" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 39 X-Trace-Id: 00-1ac73e7ff6a4dd9ee1e95d1c3aa35725-899a0a0698497700-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:37 UTC	10584	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 35 2c 39 38 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[105,98],{0:function(e,t,n){"use strict";function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropert
2024-09-19 09:50:37 UTC	9183	IN	Data Raw: 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 6e 7c 7c 22 53 65 74 22 3d 3d 3d 6e 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 6e 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 3f 66 28 65 2c 74 29 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 74 3e 6e 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 72 20 74 Data Ascii: uctor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?f(e,t):void 0}}function f(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);t>n;n++)r[n]=e[n];return r}function p(e){var t
2024-09-19 09:50:37 UTC	8949	IN	Data Raw: 61 74 28 50 28 29 28 48 28 29 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 67 65 74 48 54 4d 4c 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 22 3c 2f 73 76 67 3e 22 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 65 6d 70 6c 61 74 65 45 6c 65 6d 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 50 28 29 28 48 28 29 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 67 65 74 54 65 6d 70 6c 61 74 65 45 6c 65 6d 65 6e 74 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 6e 3d 65 2e 63 6f 6e 74 65 6e 74 2c 72 3d 6e 2e 66 69 72 73 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 6e 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 2c 58 28 6e 2c 72 2e 66 69 72 73 74 43 68 69 6c 64 29 2c 65 7d 7d 5d 29 2c 74 7d 28 66 65 29 2c 66 75 Data Ascii: at(P()(H()(t.prototype),"getHTML",this).call(this),"</svg>")}},{key:"getTemplateElement",value:function(){var e=P()(H()(t.prototype),"getTemplateElement",this).call(this),n=e.content,r=n.firstChild;return n.removeChild(r),X(n,r.firstChild),e}}]),t}(fe),fu
2024-09-19 09:50:37 UTC	8094	IN	Data Raw: 27 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 77 2d 66 61 69 6c 75 72 65 2d 6d 73 67 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 5c 6e 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 73 74 72 6f 6e 67 6c 79 2d 64 69 73 61 67 72 65 65 20 66 73 2d 32 34 22 3e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 66 73 2d 31 36 20 73 65 6d 69 2d 62 6f 6c 64 22 3e 27 2c 22 3c 2f 70 3e 5c 6e 20 20 3c 2f 64 69 76 3e 5c 6e 22 5d 29 29 2c 77 69 6e 64 6f 77 2e 49 31 38 6e 2e 74 28 22 70 6f 72 74 61 6c 5f 6a 73 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 73 2e 65 6d 61 69 6c 5f 62 6f 74 2e 66 61 69 6c 75 72 65 5f 6d 73 67 22 29 29 2c 57 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 65 28 41 65 7c 7c 28 41 65 3d 43 Data Ascii: '\n <div class="fw-failure-msg text-center">\n <span class="icon-strongly-disagree fs-24"></span>\n <p class="fs-16 semi-bold">',"</p>\n </div>\n"])),window.I18n.t("portal_js_translations.email_bot.failure_msg")),We=function(e){return Pe(Ae\|\|(Ae=C

Timestamp	Bytes transferred	Direction	Data
2024-09-19 09:50:37 UTC	668	OUT	GET /assets/cdn/portal/scripts/marketplace.js HTTP/1.1 Host: rodator.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rodator.freshdesk.com/support/solutions/articles/156000013321-solicitud-de-presupuesto-1454082 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=46_1; _x_m=x_c
2024-09-19 09:50:37 UTC	5801	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 09:50:37 GMT Content-Type: application/javascript Content-Length: 128108 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: a44729ec-4b89-4a21-b713-75a3941e7306 Etag: "fd934580cb8282c694c3e7f1ec45b95b4b9dc5312d7b35ca2fa0405e2736a891" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 36 X-Trace-Id: 00-3e467082ae0e426b814e6a9f05c0fb8a-1e3d2a647fc0c7b0-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-09-19 09:50:37 UTC	10583	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[93],{0:function(e,t,n){"use strict";function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDes
2024-09-19 09:50:37 UTC	9183	IN	Data Raw: 74 6f 72 28 6e 2c 74 29 29 7d 29 7d 72 65 74 75 72 6e 20 65 7d 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 29 2c 61 3d 6e 2e 6e 28 6f 29 2c 73 3d 6e 28 35 29 2c 6c 3d 6e 2e 6e 28 73 29 2c 63 3d 6e 28 31 36 32 29 2c 75 3d 6e 65 77 20 63 2e 61 3b 75 2e 72 65 67 69 73 74 65 72 54 61 67 28 22 65 6c 65 6d 65 6e 74 22 2c 7b 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 65 2e 61 72 67 73 2e 6d 61 74 63 68 28 2f 27 28 5c 77 2b 29 27 2f 29 5b 31 5d 2c 69 3d 72 2e 73 75 62 73 74 72 28 30 2c 72 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 29 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 50 61 74 68 3d 22 22 21 3d 3d 69 3f 22 22 2e 63 6f Data Ascii: tor(n,t))})}return e}n.d(t,"a",function(){return d});var o=n(8),a=n.n(o),s=n(5),l=n.n(s),c=n(162),u=new c.a;u.registerTag("element",{parse:function(e,t){var n=this,r=e.args.match(/'(\w+)'/)[1],i=r.substr(0,r.lastIndexOf("/"));this.elementPath=""!==i?"".co
2024-09-19 09:50:37 UTC	16384	IN	Data Raw: 31 3a 61 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 21 31 3b 72 65 74 75 72 6e 20 72 65 28 65 29 3f 67 65 28 65 2c 74 2c 6e 29 3a 6f 65 28 65 29 3f 43 65 28 65 2c 74 29 3a 74 65 28 65 29 3f 79 65 28 65 29 3a 6e 65 28 65 29 3f 6d 65 28 65 29 3a 69 65 28 65 29 3f 65 2e 67 65 74 54 65 78 74 28 29 3a 65 65 28 65 29 3f 76 65 28 65 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 67 65 74 56 61 72 69 61 62 6c 65 41 73 54 65 78 74 28 29 2c 69 3d 65 2e 70 72 6f 70 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e Data Ascii: 1:a:-1}function he(e,t){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:!1;return re(e)?ge(e,t,n):oe(e)?Ce(e,t):te(e)?ye(e):ne(e)?me(e):ie(e)?e.getText():ee(e)?ve(e):void 0}function ge(e,t,n){var r=e.getVariableAsText(),i=e.props.map(function
2024-09-19 09:50:38 UTC	16384	IN	Data Raw: 72 2c 69 29 7b 76 61 72 20 6f 3b 72 65 74 75 72 6e 20 55 74 28 29 28 74 68 69 73 2c 74 29 2c 6f 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 66 6e 2e 50 72 6f 70 65 72 74 79 41 63 63 65 73 73 2c 65 2e 69 6e 70 75 74 2c 65 2e 62 65 67 69 6e 2c 69 2c 65 2e 66 69 6c 65 29 2c 6f 2e 76 61 72 69 61 62 6c 65 3d 65 2c 6f 2e 70 72 6f 70 73 3d 72 2c 6f 7d 78 74 28 29 28 74 2c 65 29 3b 76 61 72 20 6e 3d 61 28 74 29 3b 72 65 74 75 72 6e 20 4b 74 28 29 28 74 2c 5b 7b 6b 65 79 3a 22 67 65 74 56 61 72 69 61 62 6c 65 41 73 54 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 72 69 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 6e 3f 74 68 69 73 2e 76 61 72 69 61 62 6c 65 2e 67 65 74 54 65 78 74 28 29 3a 64 65 28 74 Data Ascii: r,i){var o;return Ut()(this,t),o=n.call(this,fn.PropertyAccess,e.input,e.begin,i,e.file),o.variable=e,o.props=r,o}xt()(t,e);var n=a(t);return Kt()(t,[{key:"getVariableAsText",value:function(){return this.variable instanceof Sn?this.variable.getText():de(t
2024-09-19 09:50:38 UTC	16384	IN	Data Raw: 68 69 73 2e 69 3d 3d 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2d 31 7d 7d 2c 7b 6b 65 79 3a 22 72 69 6e 64 65 78 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 2d 74 68 69 73 2e 69 7d 7d 2c 7b 6b 65 79 3a 22 72 69 6e 64 65 78 30 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 2d 74 68 69 73 2e 69 2d 31 7d 7d 2c 7b 6b 65 79 3a 22 76 61 6c 75 65 4f 66 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 7d 5d 29 2c 74 7d 28 47 74 29 2c 73 72 3d 7b 74 79 70 65 3a 22 62 6c 6f 63 6b 22 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 Data Ascii: his.i===this.length-1}},{key:"rindex",value:function(){return this.length-this.i}},{key:"rindex0",value:function(){return this.length-this.i-1}},{key:"valueOf",value:function(){return JSON.stringify(this)}}]),t}(Gt),sr={type:"block",parse:function(e,t){va
2024-09-19 09:50:38 UTC	4542	IN	Data Raw: 73 65 20 33 32 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 63 2e 73 74 6f 70 28 29 7d 7d 2c 79 69 2c 74 68 69 73 2c 5b 5b 39 2c 32 34 2c 32 37 2c 33 30 5d 5d 29 7d 29 7d 2c 53 72 3d 7b 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 5b 22 62 72 65 61 6b 22 5d 3d 21 30 7d 7d 2c 4c 72 3d 7b 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 5b 22 63 6f 6e 74 69 6e 75 65 22 5d 3d 21 30 7d 7d 2c 54 72 3d 7b 61 73 73 69 67 6e 3a 6f 72 2c 22 66 6f 72 22 3a 73 72 2c 63 61 70 74 75 72 65 3a 6c 72 2c 22 63 61 73 65 22 3a 63 72 2c 63 6f 6d 6d 65 6e 74 3a 75 72 2c 69 6e 63 6c 75 64 65 3a 66 72 2c 72 65 6e 64 65 72 3a 70 72 2c 64 65 63 72 65 6d 65 6e 74 3a 68 72 2c 69 6e 63 72 65 6d 65 6e 74 3a 76 72 2c 63 79 63 6c 65 3a 67 Data Ascii: se 32:case"end":return c.stop()}},yi,this,[[9,24,27,30]])})},Sr={render:function(e,t){t["break"]=!0}},Lr={render:function(e,t){t["continue"]=!0}},Tr={assign:or,"for":sr,capture:lr,"case":cr,comment:ur,include:fr,render:pr,decrement:hr,increment:vr,cycle:g
2024-09-19 09:50:38 UTC	11842	IN	Data Raw: 7d 7d 2c 7b 6b 65 79 3a 22 63 72 65 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4a 6e 28 65 2c 74 68 69 73 2e 67 65 74 28 65 29 2c 74 2c 74 68 69 73 2e 6c 69 71 75 69 64 29 7d 7d 5d 29 2c 65 7d 28 29 2c 6f 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 55 74 28 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 6a 28 46 28 6e 29 29 2c 74 68 69 73 2e 70 61 72 73 65 72 3d 6e 65 77 20 69 72 28 74 68 69 73 29 2c 74 68 69 73 2e 72 65 6e 64 Data Ascii: }},{key:"create",value:function(e,t){return new Jn(e,this.get(e),t,this.liquid)}}]),e}(),oi=function(){function e(){var t=this,n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};Ut()(this,e),this.options=j(F(n)),this.parser=new ir(this),this.rend
2024-09-19 09:50:38 UTC	16384	IN	Data Raw: 70 6c 61 79 2d 6f 6e 6c 79 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 65 6c 70 64 65 73 6b 5f 74 69 63 6b 65 74 5f 63 75 73 74 6f 6d 5f 66 69 65 6c 64 5f 22 29 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 6e 65 73 74 65 64 2d 63 68 69 6c 64 2d 66 69 65 6c 64 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 21 30 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3f 61 72 67 75 Data Ascii: play-only")}function f(e){return e.id.startsWith("helpdesk_ticket_custom_field_")&&e.classList.contains("nested-child-fields")}function p(e,t){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:!0,r=arguments.length>3&&void 0!==arguments[3]?argu
2024-09-19 09:50:38 UTC	4542	IN	Data Raw: 75 73 65 72 5f 6d 61 72 6b 65 74 70 6c 61 63 65 2e 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 73 2e 74 69 63 6b 65 74 2e 73 65 74 5f 6f 70 74 69 6f 6e 73 2e 69 6e 76 61 6c 69 64 5f 76 61 6c 75 65 22 29 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 5f 67 65 74 50 61 72 65 6e 74 43 6f 6e 74 61 69 6e 65 72 28 74 29 3b 72 65 74 75 72 6e 20 6b 28 72 2c 74 2c 6e 29 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 6d 65 73 73 61 67 65 3a 77 69 6e 64 6f 77 2e 49 31 38 6e 2e 74 72 61 6e 73 6c 61 74 65 28 22 65 6e 64 75 73 65 72 5f 6d 61 72 6b 65 74 70 6c 61 63 65 2e 6f 6b 5f 6d 65 73 73 61 67 65 22 29 7d 29 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 69 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 Data Ascii: user_marketplace.error_messages.ticket.set_options.invalid_value"));var r=this._getParentContainer(t);return k(r,t,n),Promise.resolve({message:window.I18n.translate("enduser_marketplace.ok_message")})}catch(i){return Promise.reject(i.toString())}}},{key:"
2024-09-19 09:50:38 UTC	16384	IN	Data Raw: 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 5f 6f 70 74 69 6f 6e 73 22 29 2c 6e 3d 6e 65 28 29 28 74 2c 31 29 2c 72 3d 6e 5b 30 5d 2c 69 3d 70 28 74 68 69 73 2e 74 69 63 6b 65 74 46 6f 72 6d 2c 72 29 2c 6f 3d 69 2e 63 68 6f 69 63 65 73 49 6e 73 74 61 6e 63 65 2e 5f 63 75 72 72 65 6e 74 53 74 61 74 65 2e 63 68 6f 69 63 65 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 26 26 22 2d 31 22 21 3d 3d 65 2e 76 61 6c 75 65 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6c 61 62 65 6c 2e 74 72 69 6d 28 29 7d 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 69 65 28 29 28 7b 7d 2c 65 2c 6f 29 29 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 6e 20 50 72 Data Ascii: r t=e.split("_options"),n=ne()(t,1),r=n[0],i=p(this.ticketForm,r),o=i.choicesInstance._currentState.choices.filter(function(e){return e.value&&"-1"!==e.value}).map(function(e){return e.label.trim()});return Promise.resolve(ie()({},e,o))}catch(a){return Pr