Edit tour

Windows Analysis Report
https://z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com/

Overview

General Information

Sample URL:	https://z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com/
Analysis ID:	1522272
Tags:	urlscan
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6096 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2196,i,10092810096458900361,3269342873653343594,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/6184663/envelope/?sentry_key=da50b2d2de4b407e94dc71c34d3bf27e&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.117.0 HTTP/1.1Host: o1025743.ingest.sentry.ioConnection: keep-aliveContent-Length: 473sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.zendesk.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.zendesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No favicon
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No favicon
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No favicon
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No favicon
Source: https://www.zendesk.com/trust-center/	HTTP Parser: No favicon
Source: https://www.zendesk.com/service/ticketing-system/	HTTP Parser: No favicon
Source: https://support.zendesk.com/hc/en-us/	HTTP Parser: No favicon
Source: https://support.zendesk.com/hc/en-us/	HTTP Parser: No favicon
Source: https://support.zendesk.com/hc/en-us/	HTTP Parser: No favicon

Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/trust-center/	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/trust-center/	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/trust-center/	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/service/ticketing-system/	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/service/ticketing-system/	HTTP Parser: No <meta name="author".. found
Source: https://www.zendesk.com/service/ticketing-system/	HTTP Parser: No <meta name="author".. found

Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/trust-center/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/trust-center/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/trust-center/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/service/ticketing-system/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/service/ticketing-system/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.zendesk.com/service/ticketing-system/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:49917 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50343 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_383.1.dr	String found in binary or memory: "video_url": "https://www.youtube.com/@zendesk/playlists", equals www.youtube.com (Youtube)
Source: chromecache_648.1.dr	String found in binary or memory: L.getElementsByTagName("iframe"),la=S.length,na=0;na<la;na++)if(!u&&c(S[na],H.Ge)){hJ("https://www.youtube.com/iframe_api");u=!0;break}})}}else F(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_612.1.dr, chromecache_648.1.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_266.1.dr, chromecache_359.1.dr	String found in binary or memory: \u003c/p\u003e\n\u003cp\u003e\u003cimg src=\"https://zen-marketing-documentation.s3.amazonaws.com/docs/en/whats_new_banner.jpg\" alt=\"whats_new_banner.jpg\" width=\"600\"\u003e\u003c/p\u003e\n\u003cdiv class=\"note tip\"\u003e\n\u003cspan class=\"notetitle\"\u003e\u003c/span\u003eClick \u003cstrong\u003eFollow\u003c/strong\u003e in the \u003ca href=\"https://support.zendesk.com/hc/en-us/sections/4405298877338\" target=\"_blank\" rel=\"noopener\"\u003eWhat's New section\u003c/a\u003e to be notified each month when the What's New is published.\u003c/div\u003e\n\u003cp\u003eCheck out what's new in the last month:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"#h_01J3QV72JKT2GZ7E4G67K52HJR\"\u003eSupport\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J3QMYB908ZKNAHXTN7PE2SA0\"\u003eGuide\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J3QS466ZMHM7CXECN4H2D31Q\"\u003eExplore\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J3QW9CVEAGA3SETVCWXKW0N8\"\u003eAI agents (formerly Zendesk bots)\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#01J3QQ56FH9P0SG4PA1BY3RC7P\"\u003eAdmin Center\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J3QT90T3GQETF0RKDXAR5E94\"\u003eSecurity\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J3QZFP50QGZ2K50CC6RH3EF4\"\u003eTalk\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J3YP79FVEKEBP1P57R0A67X3\"\u003eZendesk QA\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J3YPJFGWADARB0MHTT84RE2J\"\u003eZendesk WFM\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#developers\"\u003eDevelopers\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#01J3QQGM2W3AZPPDPGMM2H0RHB\"\u003eNew and notable content\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAlso don't miss:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://support.zendesk.com/hc/en-us/articles/4408829663642\" target=\"_blank\" rel=\"noopener\"\u003eZendesk early access programs\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=n0qm5hsPXQk\u0026amp;list=PLb00xo9zloI79P2ZP4DDXMrbNmOprjo43\" target=\"_blank\" rel=\"noopener noreferrer\"\u003eWhat's new videos on YouTube\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"h_01J3QV72JKT2GZ7E4G67K52HJR\"\u003eSupport\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eConversations in the Zendesk Agent Workspace have a new, modernized look\u003c/strong\u003e. These changes helps agents quickly absorb and parse information in a ticket, enabling them to easily distinguish between agent and customer comments and quickly recognize the beginning and end of messages. See \u003ca href=\"https://support.zendesk.com/hc/en-us/articles/4408821259930\" target=\"_blank\" rel=\"noopener noreferrer\"\u003eAbout the Zendesk Agent Workspace\u003c/a\u003e. equals www.youtube.com (Youtube)
Source: chromecache_483.1.dr, chromecache_549.1.dr	String found in binary or memory: a.getAttribute("type")&&e.preventDefault();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var u=JSON.parse('[{"Tag":"https://www.youtube.com/iframe_api","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://cdn.pendo.io/agent/static/df3d609f-14a9-4a77-b441-73602a4aaab2/pendo.js","CategoryId":["C0007"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtm.js","CategoryId":["C0002","C0004"],"Vendor":null},{"Tag":"https://www.google-analytics.com/analytics.js","CategoryId":["C0002","C0004"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/12.d4c11cd65f6f6fc513bb.chunk.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/12.d9ecf957bd3914404824.chunk.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/1.a605478b456b5ddb983a.chunk.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.zdassets.com/customer_analytics_integration/help_center/cai.min.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/1.73297e3f3d8609add842.chunk.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://docs.google.com/presentation/d/e/2PACX-1vTjMOrQ0CA2SXky2qd5UjSbWeunCcq7r9G_LoxrcQdUVSCkakN93DM-uyIJOeQBxxjhIK8kRcOU--ok/embed","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://docs.google.com/presentation/d/e/2PACX-1vRo9lKJ1RGHZXXX-eIPuq1CjE0EOsZC5HmcZzf6p5uzWDUSvoOkIaxKWevj2n_5-sFYC7w1eXFB_wS7/embed","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/10.13da654ebc4ff074d07c.chunk.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://cdn.segment.com/analytics.js/v1/ikkIrxM8eW1iixdnIo4SLRAcr4kl5H7a/analytics.min.js","CategoryId":["C0003","C0004","C0007"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtag/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/13.884592655f8e03c201b2.chunk.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://docs.google.com/presentation/d/e/2PACX-1vTg_rjZQQxJJsm-u5IS3EyxGvch71uuD5gAM0gmfIBIAQjJYCIyTDaD97AbPLa75MHeIqqq41Kyiebb/embed","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/12.8285009719db95e12baa.chunk.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.zendesk.com/scripts/optimizely.js","CategoryId":["C0002","C0003","C0004"],"Vendor":null},{"Tag":"https://siteintercept.qualtrics.com/dxjsmodule/10.ff5c35506eb6156df16c.chunk.js","CategoryId":["C0004"],"Vendor":null}]'), equals www.youtube.com (Youtube)
Source: chromecache_589.1.dr, chromecache_461.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_385.1.dr, chromecache_451.1.dr, chromecache_556.1.dr, chromecache_669.1.dr, chromecache_589.1.dr, chromecache_609.1.dr, chromecache_376.1.dr, chromecache_479.1.dr, chromecache_503.1.dr, chromecache_409.1.dr, chromecache_657.1.dr, chromecache_343.1.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_362.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_362.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_362.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_589.1.dr, chromecache_461.1.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)
Source: chromecache_266.1.dr, chromecache_359.1.dr	String found in binary or memory: {"count":58,"next_page":"https://support.zendesk.com/api/v2/help_center/en-us/sections/4405298877338/articles.json?include=sections\u0026page=2\u0026per_page=6\u0026sort_by=created_at\u0026sort_order=desc","page":1,"page_count":10,"per_page":6,"previous_page":null,"articles":[{"id":7901336003098,"url":"https://support.zendesk.com/api/v2/help_center/en-us/articles/7901336003098.json","html_url":"https://support.zendesk.com/hc/en-us/articles/7901336003098-What-s-new-in-Zendesk-September-2024","author_id":4734621635354,"comments_disabled":false,"draft":false,"promoted":true,"position":0,"vote_sum":2,"vote_count":2,"section_id":4405298877338,"created_at":"2024-08-27T22:57:42Z","updated_at":"2024-09-03T20:03:36Z","name":"What's new in Zendesk: September 2024","title":"What's new in Zendesk: September 2024","source_locale":"en-us","locale":"en-us","outdated":false,"outdated_locales":[],"edited_at":"2024-08-29T22:07:43Z","user_segment_id":null,"permission_group_id":1324079,"content_tag_ids":[],"label_names":["mt","rank_low_algolia"],"body":"\u003cp\u003e\u003cimg src=\"https://zen-marketing-documentation.s3.amazonaws.com/docs/en/whats_new_banner.jpg\" alt=\"whats_new_banner.jpg\" width=\"600\"\u003e\u003c/p\u003e\n\u003cdiv class=\"note tip\"\u003e\n\u003cspan class=\"notetitle\"\u003e\u003c/span\u003eClick \u003cstrong\u003eFollow\u003c/strong\u003e in the \u003ca href=\"https://support.zendesk.com/hc/en-us/sections/4405298877338\" target=\"_blank\" rel=\"noopener\"\u003eWhat's New section\u003c/a\u003e to be notified each month when the What's New is published.\u003c/div\u003e\n\u003cp\u003eCheck out what's new in the last month:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"#objects-and-rules\"\u003eObjects and rules\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#accounts-and-billing\"\u003eAccounts and billing\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#people\"\u003ePeople\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J6CHW9613WY6P8HADEH2C5C1\"\u003eAgent Workspace\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J6CMTAB7R96Z5PYP08VMVWJ6\"\u003eSupport\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J6CMPCAYRAM9RVQTGAJNT61C\"\u003eExplore\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J6CZXNVMWPXYPFCQ114HYCHR\"\u003eZendesk WFM\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J6DBTB25BQJZ90GQW13QGMGB\"\u003eAI agents and bots\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#h_01J6CMZ3JJCTKKRCYHRE5F1Z4F\"\u003eSecurity\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#01J6CSVV0FSDAJMCT697D0ZKHE\"\u003eDeveloper\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAlso don't miss:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://support.zendesk.com/hc/en-us/articles/4408829663642\" target=\"_blank\" rel=\"noopener\"\u003eZendesk early access programs\u003c/a\u003e\u003c/li\u003e\n\u

Source: global traffic	DNS traffic detected: DNS query: z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: www.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d1eipm3vz40hy0.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: d16cvnquvjw7pr.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: a112699136.cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: cdn3.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: web-assets.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: o1025743.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: 819-rrq-060.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 14196354.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: s.dpmsrv.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: metadata-static-files.sfo2.cdn.digitaloceanspaces.com
Source: global traffic	DNS traffic detected: DNS query: s-static.innovid.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: d21y75miwcfqoq.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: tag.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: rtr.innovid.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bizibly.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: a.dpmsrv.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: d2v83son8kay5v.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: collector-43043.us.tvsquared.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: w3-reporting-nel.reddit.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: s.ad.smaato.net
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: simplifi.partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: sync.targeting.unrulymedia.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pendo.io
Source: global traffic	DNS traffic detected: DNS query: fei.pro-market.net
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: sync.bfmio.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: app.pendo.io
Source: global traffic	DNS traffic detected: DNS query: pbid.pro-market.net
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: ws.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: support.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: 6054c95a757a0200d2deeee0.webloader.smooch.io
Source: global traffic	DNS traffic detected: DNS query: cdn.smooch.io
Source: global traffic	DNS traffic detected: DNS query: nebula-prod.s3-us-west-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: judivnfptk.execute-api.us-west-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: 6054c95a757a0200d2deeee0.config.smooch.io
Source: global traffic	DNS traffic detected: DNS query: znehspotzjyz81wvs-zendeskinc.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 13:47:41 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCF-Ray: 8cac6d32dbb1c472-EWRCF-Cache-Status: EXPIREDVary: Accept-Encodingreferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-download-options: noopenx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: noneX-Request-ID: 8cac6d33118ac472-IADx-runtime: 0.001109x-xss-protection: 1; mode=blockX-Zendesk-Zorg: yesReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vSeSbv5W3ZXEHQYJh8l8QRIttH4BNJXEwaLuEiNFSNVvval2MlsAgoyCFtgNd5xhpa%2BrLp98M6ES2zUp1jxz3jdIhZmWVA9Rlk96144g5iKNutlpkwkr81hpH4OHxC6LJOyxNpY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Set-Cookie: __cfruid=14f67bba4b8263a0bb566587f2e6673a60eeb10d-1727617661; path=/; domain=.support.zendesk.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 29 Sep 2024 13:47:48 GMTContent-Type: application/jsonContent-Length: 42Connection: closex-amzn-RequestId: 016462df-9d82-4ef2-a371-6c66c9220ba1x-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: e3sUyFkxPHcEqlA=

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2196,i,10092810096458900361,3269342873653343594,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2196,i,10092810096458900361,3269342873653343594,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://w3-reporting-nel.reddit.com/reports	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe

Name	Source	Malicious	Antivirus Detection	Reputation
https://support.zendesk.com/hc/fr/articles/4408821374362-Clonage-des-tableaux-de-bord	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/es/articles/4408828331290-Adici%C3%B3n-de-widgets-interactivos-a-un-p	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/es/articles/4408839218842-Introducci%C3%B3n-a-los-conjuntos-de-datos-	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/es/articles/4409149177242-M%C3%A9tricas-y-atributos-para-Zendesk-Chat	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/de/articles/4408823511706-Warum-erscheinen-Endbenutzer-im-Mitarbeiter	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/en-us/articles/6961660060186-Metrics-and-attributes-for-Zendesk-AI	chromecache_354.1.dr, chromecache_599.1.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_456.1.dr, chromecache_325.1.dr	false	URL Reputation: safe	unknown
https://support.zendesk.com/hc/articles/4408821977114	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/fr/articles/4408834682778-Interaction-avec-les-tableaux-de-bord	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://www.zendesk.com/marketplace/apps/support/1069462/sondar-csat-surveys/?queryID=81a23f7a5df98a	chromecache_628.1.dr, chromecache_381.1.dr	false		unknown
https://support.zendesk.com/api/v2/help_center/en-us/sections/4405298833818-Announcements.json	chromecache_354.1.dr, chromecache_591.1.dr, chromecache_599.1.dr, chromecache_518.1.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_694.1.dr, chromecache_360.1.dr	false	URL Reputation: safe	unknown
https://support.zendesk.com/hc/de/articles/4408846869274-%C3%9Cbersicht-%C3%BCber-das-Zendesk-Sell-D	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/it/articles/4408881932698	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://siteintercept.qualtrics.com/dxjsmodule/1.73297e3f3d8609add842.chunk.js	chromecache_483.1.dr, chromecache_549.1.dr	false		unknown
https://support.zendesk.com/hc/en-us/articles/7843597686554-Release-notes-through-2024-08-16	chromecache_628.1.dr, chromecache_381.1.dr	false		unknown
https://support.zendesk.com/hc/fr/articles/4408823886874-Aper%C3%A7u-du-tableau-de-bord-Zendesk-Guid	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://www.zendesk.co.jp	chromecache_620.1.dr, chromecache_418.1.dr, chromecache_275.1.dr, chromecache_280.1.dr	false		unknown
https://cdn-assets-prod.s3.amazonaws.com/js/preview2/112699136.js	chromecache_459.1.dr, chromecache_499.1.dr	false		unknown
https://support.zendesk.com/hc/de/articles/4408827282714-Teilen-und-Ver%C3%B6ffentlichen-von-Dashboa	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://www.zendesk.com/marketplace/apps/support/1069954/ai-reply-writer/	chromecache_628.1.dr, chromecache_381.1.dr	false		unknown
https://support.zendesk.com/hc/en-us/articles/8056511676570#h_01J882CP2F1XXFTMMXDE4M03SG	chromecache_354.1.dr, chromecache_599.1.dr	false		unknown
https://support.zendesk.com/hc/es/articles/4408830467866-Trabajo-con-tablas	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://www.zendesk.com.mx	chromecache_620.1.dr, chromecache_418.1.dr	false		unknown
https://developer.zendesk.com/api-reference/live-chat/real-time-chat-api/apis/	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/articles/4408893866778	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://www.zendesk.com/marketplace/apps/support/1062771/gpt-editor/	chromecache_628.1.dr, chromecache_381.1.dr	false		unknown
https://support.zendesk.com/hc/it/articles/4408831559834	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://siteintercept.qualtrics.com	chromecache_369.1.dr, chromecache_484.1.dr	false		unknown
https://support.zendesk.com/hc/it/articles/4408824240026	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/de/articles/4408834682778-Interagieren-mit-Dashboards	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://schema.org/ListItem	chromecache_439.1.dr, chromecache_272.1.dr	false		unknown
https://support.zendesk.com/hc/de/articles/4408827894554-%C3%9Cbersicht-%C3%BCber-das-Zendesk-Talk-D	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/zh-cn/articles/4408831681690	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/fr/articles/4408823429658-Pourquoi-le-message-%C3%89chec-du-t%C3%A9l%	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/fr/articles/4408824384538-Rapports-utilisant-des-champs-personnalis%C	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/es/articles/4408845694234	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_526.1.dr, chromecache_488.1.dr, chromecache_675.1.dr, chromecache_314.1.dr	false	URL Reputation: safe	unknown
https://support.zendesk.com/hc/articles/4408839350426	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown
https://support.zendesk.com/hc/de/articles/4408821589530-Erstellen-von-Berichten	chromecache_367.1.dr, chromecache_553.1.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
192.28.144.124	819-rrq-060.mktoresp.com	United States	15224	OMNITUREUS	false
13.33.187.19	script.hotjar.com	United States	16509	AMAZON-02US	false
35.160.35.184	unknown	United States	16509	AMAZON-02US	false
104.18.248.37	support.zendesk.com	United States	13335	CLOUDFLARENETUS	false
162.159.128.7	z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
3.160.150.30	sync.intentiq.com	United States	16509	AMAZON-02US	false
54.171.123.149	unknown	United States	16509	AMAZON-02US	false
108.156.61.163	unknown	United States	16509	AMAZON-02US	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
52.211.255.159	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
13.32.118.3	unknown	United States	16509	AMAZON-02US	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
3.14.218.50	unknown	United States	16509	AMAZON-02US	false
13.35.58.148	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.186.70	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
185.89.210.20	unknown	Germany	29990	ASN-APPNEXUS	false
104.18.72.113	static.zdassets.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
37.252.171.53	unknown	European Union	29990	ASN-APPNEXUS	false
104.18.42.227	metadata-static-files.sfo2.cdn.digitaloceanspaces.com	United States	13335	CLOUDFLARENETUS	false
35.166.226.67	api.segment.io	United States	16509	AMAZON-02US	false
52.37.62.36	judivnfptk.execute-api.us-west-2.amazonaws.com	United States	16509	AMAZON-02US	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
13.32.99.71	d2elgqch7xnif1.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.70.113	unknown	United States	13335	CLOUDFLARENETUS	false
185.89.211.84	unknown	Germany	29990	ASN-APPNEXUS	false
142.250.185.194	unknown	United States	15169	GOOGLEUS	false
172.217.23.100	unknown	United States	15169	GOOGLEUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
3.248.166.48	unknown	United States	16509	AMAZON-02US	false
98.82.156.107	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
18.245.175.46	unknown	United States	16509	AMAZON-02US	false
216.58.206.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.36.213.229	cdn.pendo.io	United States	2686	ATGS-MMD-ASUS	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false

Name	IP	Active	Malicious	Reputation
um.simpli.fi	34.91.62.186	true	false	unknown
s3-r-w.us-west-2.amazonaws.com	3.5.79.124	true	false	unknown
a112699136.cdn.optimizely.com	104.18.65.57	true	false	unknown
eu-eb2.3lift.com	13.248.245.213	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
stats.g.doubleclick.net	74.125.133.154	true	false	unknown
app.pendo.io	34.107.204.85	true	false	unknown
static.zdassets.com	104.18.72.113	true	false	unknown
t.co	162.159.140.229	true	false	unknown
pbid.pro-market.net	107.178.240.89	true	false	unknown
judivnfptk.execute-api.us-west-2.amazonaws.com	52.37.62.36	true	false	unknown
cm.g.doubleclick.net	142.250.181.226	true	false	unknown
sync.1rx.io	46.228.174.117	true	false	unknown
www.google.com	142.250.74.196	true	false	unknown
api.segment.io	35.166.226.67	true	false	unknown
sync.intentiq.com	3.160.150.30	true	false	unknown
metadata-static-files.sfo2.cdn.digitaloceanspaces.com	104.18.42.227	true	false	unknown
bcp.crwdcntrl.net	52.211.255.159	true	false	unknown
static-cdn.hotjar.com	18.66.102.53	true	false	unknown
logx.optimizely.com	34.49.241.189	true	false	unknown
star-mini.c10r.facebook.com	157.240.252.35	true	false	unknown
d16cvnquvjw7pr.cloudfront.net	65.9.7.184	true	false	unknown
us-u.openx.net	35.244.159.8	true	false	unknown
s.twitter.com	104.244.42.3	true	false	unknown
cdn3.optimizely.com	172.64.152.14	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.1.140	true	false	unknown
cdn.optimizely.com	104.18.65.57	true	false	unknown
analytics-alv.google.com	216.239.34.181	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	34.255.72.255	true	false	unknown
googleads.g.doubleclick.net	216.58.206.34	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
cdn.pendo.io	34.36.213.229	true	false	unknown
d2v83son8kay5v.cloudfront.net	13.224.194.143	true	false	unknown
td.doubleclick.net	142.250.185.130	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	35.173.107.214	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
wsky-live.live.eks.hotjar.com	52.16.153.177	true	false	unknown
collectorv.us.tvsquared.com	3.138.129.130	true	false	unknown
dart.l.doubleclick.net	142.250.186.70	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
adservice.google.com	142.250.185.130	true	false	unknown
z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	162.159.128.7	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
d1eipm3vz40hy0.cloudfront.net	13.32.118.69	true	false	unknown
6054c95a757a0200d2deeee0.webloader.smooch.io	18.66.112.7	true	false	unknown
cdn.smooch.io	18.66.102.56	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
d296je7bbdd650.cloudfront.net	13.35.58.148	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
819-rrq-060.mktoresp.com	192.28.144.124	true	false	unknown
d2elgqch7xnif1.cloudfront.net	13.32.99.71	true	false	unknown
vpc-dpm-440981217.us-east-1.elb.amazonaws.com	52.71.237.172	true	false	unknown
script.hotjar.com	13.33.187.19	true	false	unknown
i.simpli.fi	35.234.162.151	true	false	unknown
support.zendesk.com	104.18.248.37	true	false	unknown
d21y75miwcfqoq.cloudfront.net	13.33.158.137	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.1.30.85	true	false	unknown
rotator-prod-uk-acai-lb.inbake.com	3.11.176.160	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	54.78.106.223	true	false	unknown
tag.simpli.fi	35.204.89.238	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
ad.doubleclick.net	142.250.185.102	true	false	unknown
s.amazon-adsystem.com	98.82.158.241	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.74.96.2	true	false	unknown
fei.pro-market.net	107.178.240.89	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
o1025743.ingest.sentry.io	34.120.195.249	true	false	unknown
s.ad.smaato.net	13.32.27.108	true	false	unknown
fp2c5c.wac.kappacdn.net	152.195.15.58	true	false	unknown
ib.anycast.adnxs.com	37.252.171.21	true	false	unknown
load-euw1.exelator.com	54.78.254.47	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
rtr.innovid.com	unknown	unknown	false	unknown
collector-43043.us.tvsquared.com	unknown	unknown	false	unknown
nebula-prod.s3-us-west-2.amazonaws.com	unknown	unknown	false	unknown
siteintercept.qualtrics.com	unknown	unknown	false	unknown
secure.adnxs.com	unknown	unknown	false	unknown
znehspotzjyz81wvs-zendeskinc.siteintercept.qualtrics.com	unknown	unknown	false	unknown
s.dpmsrv.com	unknown	unknown	false	unknown
sync.targeting.unrulymedia.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
simplifi.partners.tremorhub.com	unknown	unknown	false	unknown
j.6sc.co	unknown	unknown	false	unknown
ws.hotjar.com	unknown	unknown	false	unknown
6054c95a757a0200d2deeee0.config.smooch.io	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	unknown
c.6sc.co	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
ce.lijit.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
www.zendesk.com	unknown	unknown	false	unknown
stags.bluekai.com	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown
web-assets.zendesk.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://rtr.innovid.com/placement/container-tag/uuid/1727617621275	false		unknown
https://ib.adnxs.com/setuid?entity=66&code=B20A1CB469F44F53ABF3A705ADD5F874	false		unknown
https://metadata-static-files.sfo2.cdn.digitaloceanspaces.com/pixel/lp.js	false		unknown
https://a.dpmsrv.com/dpmpxl/index.php?id=4133015554633788654&zn=&sn=&q=xImp&v=1.x&cl=1478&pixelIndex=0&r=395837&tzOffset=240&url=https%3A%2F%2Fwww.zendesk.com%2Ftrust-center%2F	false		unknown
https://static.zdassets.com/customer_analytics_integration/help_center/cai.min.js	false		unknown
https://app.pendo.io/data/guide.js/df3d609f-14a9-4a77-b441-73602a4aaab2?id=12&jzb=eJydjrFO9DAQhN9l60scnOQSp0OC4m8ACX5ayxcvR4TPjuz1RQLl3W9DcVDTzax2Zr4vOE9pohD_WRhAP90_3D3qF636vmul6gpZV23R1KyUesNCHg6q29ft3lQ17MCMY8ievrNsc3Qs3onmNAixLEv5id5i-ijHcBIUc6JiRE8YBX8HZ19_tn12bgcnJGMNGRiuYJuc_gLnjD9mc0SOotf_n2G9AnMnm9lEhrn9feLt7V8qUSkhK9lwzxljmoLfzqVs-vJGzzFYWNcLtstgYg&v=2.248.1_prod&ct=1727617639904	false		unknown
https://w3-reporting-nel.reddit.com/reports	false	URL Reputation: safe	unknown
https://alb.reddit.com/rp.gif?ts=1727617647028&id=a2_ewmtwf8ujfcn&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=a97d08e5-d24b-4cd7-a0c4-fd3ca748283d&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	false		unknown
https://a.dpmsrv.com/dpmpxl/index.php?zn=&sn=&q=xSeg&v=1.x&ep%5Bids%5D=35557257%2C35557258&cl=1478&pixelIndex=0&r=795175&tzOffset=240&url=https%3A%2F%2Fwww.zendesk.com%2Fhelp-center-closed%2F%3Futm_source%3Dhelpcenter-closed%26utm_medium%3Dpoweredbyzendesk%26utm_campaign%3Dtext%26utm_content%3Dz3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com&id=	false		unknown
https://support.zendesk.com/hc/theming_assets/01HYDGNXGC3R8PAHSCTJC3T9WX	false		unknown
https://um.simpli.fi/yahoo	false		unknown
https://um.simpli.fi/exelatem	false		unknown
https://us-u.openx.net/w/1.0/cm?cc=1&id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D	false		unknown
https://support.zendesk.com/hc/theming_assets/01J4PWMJ189RGXSGFA4V4XC7Z2	false		unknown
https://o1025743.ingest.sentry.io/api/6184663/envelope/?sentry_key=da50b2d2de4b407e94dc71c34d3bf27e&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.117.0	false		unknown
https://tag.simpli.fi/sifitag/bab0a544-66d5-4ca9-bcf9-c0221beb5b0e	false		unknown
https://cdn.cookielaw.org/consent/4952526b-ac3d-4b18-88eb-7a42e6133c04/01909645-7708-7bc6-940e-46da6addf2af/en.json	false		unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	false		unknown
https://eb2.3lift.com/xuid?mid=7969&xuid=B20A1CB469F44F53ABF3A705ADD5F874&dongle=yf3	false		unknown
https://um.simpli.fi/ox_match	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://um.simpli.fi/bluekai	false		unknown
https://6054c95a757a0200d2deeee0.webloader.smooch.io/	false		unknown
https://loadm.exelator.com/load/?p=204&g=2191&simid=B20A1CB469F44F53ABF3A705ADD5F874&j=0&xl8blockcheck=1	false		unknown
https://static.zdassets.com/customer_analytics_integration/marketing_website/cai.min.js	false		unknown
https://alb.reddit.com/rp.gif?ts=1727617621151&id=a2_ewmtwf8ujfcn&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=58267738-5504-4191-92c3-af4a9a1f61d5&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	false		unknown
https://collector-43043.us.tvsquared.com/tv2track.js	false		unknown
https://um.simpli.fi/ad_advisor	false		unknown
https://a.dpmsrv.com/dpmpxl/index.php?id=4133015554633788654&zn=&sn=&q=xImp&v=1.x&cl=1478&pixelIndex=0&r=855369&tzOffset=240&url=https%3A%2F%2Fwww.zendesk.com%2Fservice%2Fticketing-system%2F	false		unknown
https://a.dpmsrv.com/dpmpxl/index.php?zn=&sn=&q=xSeg&v=1.x&ep%5Bids%5D=35557257%2C35557258&cl=1478&pixelIndex=0&r=401666&tzOffset=240&url=https%3A%2F%2Fwww.zendesk.com%2Fservice%2Fticketing-system%2F&id=	false		unknown
https://um.simpli.fi/nexxen	false		unknown
https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com	false		unknown
https://ib.adnxs.com/seg?add=35558225&gtmcb=1614217220	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522272
Start date and time:	2024-09-29 15:45:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/671@368/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.zendesk.com/trust-center/ Browse: https://www.zendesk.com/service/ticketing-system/ Browse: https://support.zendesk.com/hc/en-us/

Input	Output
URL: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com Model: jbxai	{ "brand":["Zendesk"], "contains_trigger_text":true, "trigger_text":"Read the guide", "prominent_button_name":"Free trial", "text_input_field_labels":["Zendesk for customer service", "Zendesk for employee service", "Zendesk for sales", "Zendesk for Startups"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.zendesk.com/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com Model: jbxai	{ "brand":["Zendesk"], "contains_trigger_text":true, "trigger_text":"Read the guide", "prominent_button_name":"Free trial", "text_input_field_labels":["Zendesk for customer service", "Zendesk for employee service", "Zendesk for sales", "Zendesk for Enterprise", "Zendesk for Small Business"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.zendesk.com/trust-center/ Model: jbxai	{ "brand":["Zendesk"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Demo", "text_input_field_labels":["Security", "Privacy", "Zendesk AI", "Legal"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.zendesk.com/trust-center/ Model: jbxai	{ "brand":["Zendesk"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Free trial", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.zendesk.com/service/ticketing-system/ Model: jbxai	{ "brand":["Zendesk"], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.zendesk.com/hc/en-us/ Model: jbxai	{ "brand":["Zendesk"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Knowledge base", "Developer guides", "Training"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.zendesk.com/hc/en-us/ Model: jbxai	{ "brand":["Zendesk"], "contains_trigger_text":true, "trigger_text":"Make the most of your Zendesk", "prominent_button_name":"Sign in", "text_input_field_labels":["Set yourself up for success with", "Make the most of your Zendesk"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.zendesk.com/hc/en-us/ Model: jbxai	{ "brand":["Zendesk"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Sign in", "text_input_field_labels":null, "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6660
Entropy (8bit):	4.580536411839385
Encrypted:	false
SSDEEP:	48:OcG62wjD0PZuFi91hhHv/8d1WnayhdKrUznZZeaZZlFM/HhaVzAO:TGd/8vWaMKwLZZ3ZZlFkHhO8O
MD5:	8C83CE211F6B0AA5223ED56957CE5568
SHA1:	F0EDAF516DC208583DD5768B9BE8958BAC0C778D
SHA-256:	DC8A80B280012A5DCD546AAC795278C82FFA0FECA1B8624D626681E84DB1817A
SHA-512:	3AE99A1F22BDA34CDF69C462CA2B5D16A1CC7C8B432ECB9513CA5FA30D4EA85E08EE789BE42D3681E933DD0B68EC1369ADF963B2891C5A822FA16457E6CFC638
Malicious:	false
Reputation:	low
Preview:	/* ------------------------------. * -- Activations & Badges ------. * ------------------------------ /...\_pendo-badge {. min-height: 0 !important;.}../ ------------------------------. * -- Main Global Styling -------. * ------------------------------ /...\_pendo-guide\_ {. / -- Overarching settings for all guides -- /.}...\_pendo-guide-container\_ {. / -- Guide border, shadow, background, etc. -- /.}...\_pendo-guide-container\_ .\_pendo-guide-content\_ {. / -- Content area -- use for font attributes, padding, etc. /.}.../ ------------------------------. * -- Lightbox Specific Styling -. * ------------------------------ /...\_pendo-guide-lb\_ {. / -- Overarching settings for Lightbox -- /.}...\_pendo-guide-lb\_ .\_pendo-guide-container\_ {. / -- Guide border, shadow, background, etc. -- /.}...\_pendo-guide-lb\_ .\_pendo-guide-container\_ .\_pendo-guide-content\_ {. / -- Content area -- use for font attributes, padding, etc. /.}...\_pendo-backdrop\_ {. / The b

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:40 UTC	698	OUT	GET / HTTP/1.1 Host: z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:41 UTC	1191	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 13:46:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close p3p: CP="NOI DSP COR NID ADMa OPTa OUR NOR" vary: Accept location: https://www.zendesk.com/app/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com strict-transport-security: max-age=31536000; includeSubDomains set-cookie: _zendesk_authenticated=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure; HttpOnly; SameSite=None cache-control: no-cache x-zendesk-origin-server: classic-app-server-7ddd65f878-952k8 x-runtime: 0.049702 X-Zendesk-Zorg: yes X-Zendesk-Zorg: yes X-Request-ID: 8cac6bb5ac5cc434-EWR CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WFiQeB1SWGayxLDBIOQgY5%2BNXFdui8xDwoNqDS%2FC3OlyWQ2M3ERoYq9mEzHHntvgKGdXVXtx2mL13Qv4B9lEU2JcnLo7%2FTTh9dq90Yd0sBQ%2BLZlEvW%2Belv164lhjaO8VSigiSoZJNDEHSDXhBuWg2WxflcjLQv4pL5GvUQzOmAdq19NhJ2YkZUk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
2024-09-29 13:46:41 UTC	833	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 7a 65 6e 64 65 73 6b 5f 73 65 73 73 69 6f 6e 3d 75 58 45 4b 6d 71 45 78 77 50 69 46 51 55 75 6d 46 38 61 61 34 41 25 32 46 62 6b 73 6b 78 33 72 42 63 39 63 77 73 36 57 41 54 42 4a 57 55 4b 53 6e 38 6f 4b 61 6d 39 49 50 73 66 41 45 6f 6e 4f 72 41 64 6f 6e 32 54 55 4a 74 75 53 73 72 25 32 42 4c 77 4e 72 47 58 57 71 32 71 7a 4b 37 53 32 76 33 65 4f 43 6f 6c 6e 57 6d 39 69 69 4c 69 37 4e 4c 6a 48 49 38 39 35 79 66 4b 69 42 77 65 4d 38 43 6a 68 57 44 57 6a 6e 6a 35 63 45 69 61 6a 4e 57 5a 72 67 65 37 32 70 4e 6f 58 45 49 76 49 62 47 73 4a 76 63 76 73 4a 25 32 42 58 41 49 44 51 42 43 59 34 39 61 36 63 33 5a 58 46 37 57 78 48 69 4b 6a 38 73 46 73 57 54 4b 4c 47 25 32 42 58 43 74 39 52 25 32 46 7a 66 68 62 65 33 6c 41 25 33 Data Ascii: Set-Cookie: _zendesk_session=uXEKmqExwPiFQUumF8aa4A%2Fbkskx3rBc9cws6WATBJWUKSn8oKam9IPsfAEonOrAdon2TUJtuSsr%2BLwNrGXWq2qzK7S2v3eOColnWm9iiLi7NLjHI895yfKiBweM8CjhWDWjnj5cEiajNWZrge72pNoXEIvIbGsJvcvsJ%2BXAIDQBCY49a6c3ZXF7WxHiKj8sFsWTKLG%2BXCt9R%2Fzfhbe3lA%3
2024-09-29 13:46:41 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 61 70 70 2f 68 65 6c 70 2d 63 65 6e 74 65 72 2d 63 6c 6f 73 65 64 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 68 65 6c 70 63 65 6e 74 65 72 2d 63 6c 6f 73 65 64 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 70 6f 77 65 72 65 64 62 79 7a 65 6e 64 65 73 6b 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 74 65 78 74 26 61 6d 70 3b 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 7a 33 6e 61 70 69 74 65 73 74 2d 33 64 30 39 63 35 66 32 39 62 64 66 33 34 34 61 62 65 61 30 33 32 32 37 62 64 30 65 36 38 31 35 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 3e 72 65 64 69 72 65 63 74 65 64 3c Data Ascii: 10c<html><body>You are being <a href="https://www.zendesk.com/app/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com">redirected<
2024-09-29 13:46:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:43 UTC	1249	OUT	GET / HTTP/1.1 Host: z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zendesk_session=uXEKmqExwPiFQUumF8aa4A%2Fbkskx3rBc9cws6WATBJWUKSn8oKam9IPsfAEonOrAdon2TUJtuSsr%2BLwNrGXWq2qzK7S2v3eOColnWm9iiLi7NLjHI895yfKiBweM8CjhWDWjnj5cEiajNWZrge72pNoXEIvIbGsJvcvsJ%2BXAIDQBCY49a6c3ZXF7WxHiKj8sFsWTKLG%2BXCt9R%2Fzfhbe3lA%3D%3D--PIvtNJ0iW0CmVo7P--XCT09hu%2FRx0%2FDdrfj40FBg%3D%3D; __cf_bm=z.KcXcDu52YhsbzreyCmXZrVIP.1cFau6E4en9CMQU0-1727617601-1.0.1.1-kzUiibU4Qx.t9V4iHBBiFNBdiUKtcvIt4Ll74yAbaVIQCiDr.u0Y3TKZzNVImv_QKMihqNg84UoAIOYJCk3p983zzBAf.gIAzxdIm.9nBwQ; __cfruid=45f356816d509a7f418d0af7e33a9d604b250f45-1727617601
2024-09-29 13:46:44 UTC	1172	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 13:46:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close p3p: CP="NOI DSP COR NID ADMa OPTa OUR NOR" vary: Accept location: https://www.zendesk.com/app/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com strict-transport-security: max-age=31536000; includeSubDomains set-cookie: _zendesk_authenticated=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure; HttpOnly; SameSite=None set-cookie: _zendesk_session=qtVnX0YQgwrnRfT9Go4QgKIFOlQYb%2B6yRrnNOeMmT1nxsBYeVqd5GG0SlJ%2B%2B13aq4Tc8eZVpw3KFcBS3sCEVY8IncVD05PiinIMLpQMdoW9eqOd%2BuJzfKB%2F8aWPdQ3KgZ%2FvSnzXF%2FBbrKRbizdDUr%2Fu5Pz8ZOKgT69cAfPizlh%2FIW6GuLukGpc5PBSLMEQHcp8u6V3eD2KbtCbSIt4WKTA%3D%3D--AgUNxUTsA63UQpLz--%2BwOdsPE%2F9PdjbZIJpWjtdQ%3D%3D; path=/; secure; HttpOnly; SameSite=None cache-control: no-cache x-zendesk-origin-server: classic-app-server-7ddd65f878-wdcnm x-runtime: 0.036854 X-Zendesk-Zorg: yes X-Zendesk-Zorg: yes X-Request-ID: 8cac6bc8eff88c11-EWR CF-Cache-Status: DYNAMIC
2024-09-29 13:46:44 UTC	425	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 73 64 70 64 7a 32 44 4d 70 38 6d 4b 55 44 4b 58 30 30 67 35 6c 35 64 41 37 61 49 45 34 4d 6c 4e 4b 38 4e 6f 4b 56 61 4a 4f 32 63 54 62 67 4b 39 53 45 34 49 4f 31 6c 4d 75 67 33 49 35 33 4b 4a 4a 76 79 65 61 58 6f 61 53 78 45 46 4e 79 6b 66 32 66 55 53 59 58 6f 70 54 36 49 64 31 69 67 59 4c 55 4a 50 33 6a 76 50 25 32 46 43 46 6f 4d 6c 75 6a 77 7a 32 57 6c 6b 4e 6d 63 33 4f 66 4a 71 33 42 77 53 50 66 67 4e 42 4e 6f 39 76 4e 56 4e 48 70 77 52 6c 47 61 4c 33 79 73 78 36 78 63 46 47 34 62 30 69 68 45 62 59 39 52 58 57 30 70 66 75 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sdpdz2DMp8mKUDKX00g5l5dA7aIE4MlNK8NoKVaJO2cTbgK9SE4IO1lMug3I53KJJvyeaXoaSxEFNykf2fUSYXopT6Id1igYLUJP3jvP%2FCFoMlujwz2WlkNmc3OfJq3BwSPfgNBNo9vNVNHpwRlGaL3ysx6xcFG4b0ihEbY9RXW0pfu
2024-09-29 13:46:44 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 61 70 70 2f 68 65 6c 70 2d 63 65 6e 74 65 72 2d 63 6c 6f 73 65 64 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 68 65 6c 70 63 65 6e 74 65 72 2d 63 6c 6f 73 65 64 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 70 6f 77 65 72 65 64 62 79 7a 65 6e 64 65 73 6b 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 74 65 78 74 26 61 6d 70 3b 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 7a 33 6e 61 70 69 74 65 73 74 2d 33 64 30 39 63 35 66 32 39 62 64 66 33 34 34 61 62 65 61 30 33 32 32 37 62 64 30 65 36 38 31 35 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 3e 72 65 64 69 72 65 63 74 65 64 3c Data Ascii: 10c<html><body>You are being <a href="https://www.zendesk.com/app/help-center-closed/?utm_source=helpcenter-closed&utm_medium=poweredbyzendesk&utm_campaign=text&utm_content=z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com">redirected<
2024-09-29 13:46:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 13:46:44 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=97098 Date: Sun, 29 Sep 2024 13:46:44 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:45 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 13:46:45 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=97127 Date: Sun, 29 Sep 2024 13:46:45 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 13:46:45 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:48 UTC	746	OUT	POST /api/6184663/envelope/?sentry_key=da50b2d2de4b407e94dc71c34d3bf27e&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.117.0 HTTP/1.1 Host: o1025743.ingest.sentry.io Connection: keep-alive Content-Length: 473 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.zendesk.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:48 UTC	473	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 39 2d 32 39 54 31 33 3a 34 36 3a 34 37 2e 34 38 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 6e 65 78 74 6a 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 37 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 62 31 33 38 32 63 34 30 65 35 34 63 34 32 63 34 61 64 61 35 33 61 64 33 32 37 30 62 37 34 32 66 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 39 2d 32 39 54 31 33 3a 34 36 3a 34 37 2e 34 38 35 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 32 39 54 31 33 3a 34 36 3a 34 37 2e 34 38 35 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-09-29T13:46:47.485Z","sdk":{"name":"sentry.javascript.nextjs","version":"7.117.0"}}{"type":"session"}{"sid":"b1382c40e54c42c4ada53ad3270b742f","init":true,"started":"2024-09-29T13:46:47.485Z","timestamp":"2024-09-29T13:46:47.485Z","stat
2024-09-29 13:46:48 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:46:48 GMT Content-Type: application/json Content-Length: 2 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:46:48 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Windows Analysis Report
https://z3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com/

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:49 UTC	544	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:49 UTC	907	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: jwlUUXc1HMPClYXMpY+NPQ== Last-Modified: Thu, 26 Sep 2024 06:47:52 GMT x-ms-request-id: 6071be92-601e-0053-3944-108f85000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Age: 79838 Expires: Sat, 28 Sep 2024 15:36:10 GMT Cache-Control: public, max-age=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cac6be9accb422e-EWR
2024-09-29 13:46:49 UTC	462	IN	Data Raw: 35 32 65 30 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52e0var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 2c 22 46 52 22 2c 22 49 54 22 2c 22 43 59 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 48 55 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 Data Ascii: ,"FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.i
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 69 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 Data Ascii: i.length;++n)if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAt
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f Data Ascii: tListener("message",s.messageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){fo
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6e 7c 7c 28 69 2e 62 6f 64 79 3f 28 28 65 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e Data Ascii: turn n\|\|(i.body?((e=i.createElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 28 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c Data Ascii: (),this.fetchBannerSDKDependency(),this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 77 69 6e 64 6f 77 3b 69 2e 4f 6e 65 54 72 75 73 74 26 26 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e Data Ascii: window;i.OneTrust&&i.OneTrust.geolocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 62 75 74 65 28 22 64 61 74 61 2d 64 4c 61 79 65 72 2d 6e 61 6d 65 22 29 7c 7c 22 64 61 74 61 4c 61 79 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f Data Ascii: bute("data-dLayer-name")\|\|"dataLayer"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessio
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 65 28 29 7d 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 Data Ascii: unction(){e()})},h.prototype.getRegionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 62 61 6c 53 63 6f 70 65 3d 21 30 2c 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 29 3a 28 70 2e 68 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 Data Ascii: balScope=!0,p.isStubReady=!1):(p.hasIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:49 UTC	480	OUT	GET /api/6184663/envelope/?sentry_key=da50b2d2de4b407e94dc71c34d3bf27e&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.117.0 HTTP/1.1 Host: o1025743.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:49 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Sun, 29 Sep 2024 13:46:49 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:49 UTC	631	OUT	GET /consent/4952526b-ac3d-4b18-88eb-7a42e6133c04/4952526b-ac3d-4b18-88eb-7a42e6133c04.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.zendesk.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:49 UTC	982	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8cac6bee1850c44d-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 49989 Cache-Control: public, max-age=86400 Expires: Mon, 30 Sep 2024 13:46:49 GMT Last-Modified: Thu, 11 Jul 2024 01:26:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: NYZoNqtTosvdQgg34wlmcA== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 81a23482-501e-00be-1931-d38601000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-29 13:46:49 UTC	387	IN	Data Raw: 32 33 65 32 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 36 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 34 39 35 32 Data Ascii: 23e2{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202406.1.0","OptanonDataJSON":"4952
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 39 30 39 36 36 37 2d 30 61 65 66 2d 37 33 65 36 2d 61 38 66 31 2d 32 38 64 61 39 36 32 62 36 39 65 33 22 2c 22 4e 61 6d 65 22 3a 22 54 68 61 69 6c 61 6e 64 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 74 68 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 22 3a 22 64 65 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 70 74 22 3a 22 70 74 22 2c 22 6b 6f 22 3a 22 Data Ascii: eckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"01909667-0aef-73e6-a8f1-28da962b69e3","Name":"Thailand","Countries":["th"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","sv":"sv","ru":"ru","pt":"pt","ko":"
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 61 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 63 6e 22 2c 22 67 72 22 2c 22 65 73 22 2c 22 61 74 22 2c 22 72 65 22 2c 22 63 79 22 2c 22 63 7a 22 2c 22 61 78 22 2c 22 70 6c 22 2c 22 72 6f 22 2c 22 6c 69 22 2c 22 6e 6c 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 22 3a 22 64 65 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 70 74 22 3a 22 70 74 22 2c 22 6b 6f 22 3a 22 6b 6f 22 2c 22 7a 68 2d 54 57 22 3a 22 7a 68 2d 54 57 22 2c 22 7a 68 2d 48 4b 22 3a 22 7a 68 2d 48 4b 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 66 72 22 3a 22 66 72 Data Ascii: ,"sm","gb","yt","ie","gf","ae","mq","mt","gp","is","cn","gr","es","at","re","cy","cz","ax","pl","ro","li","nl"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","sv":"sv","ru":"ru","pt":"pt","ko":"ko","zh-TW":"zh-TW","zh-HK":"zh-HK","it":"it","fr":"fr
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 64 65 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 65 6e 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 70 74 22 3a 22 70 74 22 2c 22 6b 6f 22 3a 22 6b 6f 22 2c 22 6a 61 22 3a 22 6a 61 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 66 72 22 3a 22 66 72 22 2c 22 65 73 22 3a 22 65 73 22 2c 22 6e 6c 22 3a 22 6e 6c 22 2c 22 7a 68 22 3a 22 7a 68 22 2c 22 63 61 22 3a 22 63 61 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e Data Ascii: de","default":"en","ru":"ru","th":"th","pt":"pt","ko":"ko","ja":"ja","it":"it","fr":"fr","es":"es","nl":"nl","zh":"zh","ca":"ca"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEn
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 30 31 39 30 39 36 34 35 2d 37 37 30 38 2d 37 63 32 66 2d 38 30 62 39 2d 66 36 62 35 39 39 31 61 38 38 31 34 22 2c 22 4e 61 6d 65 22 3a 22 53 69 6e 67 61 70 6f 72 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 73 67 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 22 3a 22 64 65 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 70 74 22 3a 22 70 74 22 2c 22 6b 6f 22 3a 22 6b 6f 22 2c 22 7a 68 2d 54 57 22 3a 22 7a 68 2d 54 57 22 2c 22 7a 68 2d 48 4b 22 3a 22 7a 68 2d 48 4b 22 2c 22 69 74 Data Ascii: ":false,"EnableJWTAuthForKnownUsers":false},{"Id":"01909645-7708-7c2f-80b9-f6b5991a8814","Name":"Singapore","Countries":["sg"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","sv":"sv","ru":"ru","pt":"pt","ko":"ko","zh-TW":"zh-TW","zh-HK":"zh-HK","it
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 62 71 22 2c 22 73 62 22 2c 22 73 63 22 2c 22 73 64 22 2c 22 62 73 22 2c 22 62 74 22 2c 22 62 76 22 2c 22 62 77 22 2c 22 73 68 22 2c 22 62 79 22 2c 22 73 6a 22 2c 22 62 7a 22 2c 22 73 6c 22 2c 22 73 6e 22 2c 22 73 6f 22 2c 22 73 72 22 2c 22 73 73 22 2c 22 63 63 22 2c 22 73 74 22 2c 22 63 64 22 2c 22 63 66 22 2c 22 73 76 22 2c 22 63 67 22 2c 22 73 78 22 2c 22 73 79 22 2c 22 63 69 22 2c 22 73 7a 22 2c 22 63 6b 22 2c 22 63 6c 22 2c 22 63 6d 22 2c 22 63 6f 22 2c 22 74 63 22 2c 22 63 72 22 2c 22 74 64 22 2c 22 63 75 22 2c 22 74 66 22 2c 22 74 67 22 2c 22 63 76 22 2c 22 63 77 22 2c 22 63 78 22 2c 22 74 6a 22 2c 22 74 6b 22 2c 22 74 6c 22 2c 22 74 6d 22 2c 22 74 6e 22 2c Data Ascii: "bj","bl","bm","bn","bo","sa","bq","sb","sc","sd","bs","bt","bv","bw","sh","by","sj","bz","sl","sn","so","sr","ss","cc","st","cd","cf","sv","cg","sx","sy","ci","sz","ck","cl","cm","co","tc","cr","td","cu","tf","tg","cv","cw","cx","tj","tk","tl","tm","tn",
2024-09-29 13:46:49 UTC	1369	IN	Data Raw: 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 31 31 54 30 31 3a 32 36 3a 30 37 2e 39 32 38 36 32 37 37 38 30 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 31 31 54 30 31 3a 32 36 3a 30 37 2e 39 32 38 36 34 32 33 38 30 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 Data Ascii: a":{"cookieVersion":"1","createdTime":"2024-07-11T01:26:07.928627780","updatedTime":"2024-07-11T01:26:07.928642380","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVe
2024-09-29 13:46:49 UTC	593	IN	Data Raw: 65 2c 22 4d 6f 62 69 6c 65 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 43 4d 44 4d 41 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 50 22 3a 74 72 75 65 7d 2c 22 49 73 53 75 70 70 72 65 73 73 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 49 73 53 75 70 70 72 65 73 73 50 43 22 3a 66 61 6c 73 65 2c 22 50 75 62 6c 69 73 68 65 72 43 43 22 3a 22 55 53 22 2c 22 44 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 54 65 6e 61 6e 74 47 75 69 64 22 3a 22 31 65 34 34 37 38 Data Ascii: e,"MobileAuthenticatedConsents":true,"CookieV2GCMDMA":true,"CookieV2RemoveSettingsIcon":true,"CookieV2GeneralVendors":true,"CookieV2GPP":true},"IsSuppressBanner":false,"IsSuppressPC":false,"PublisherCC":"US","Domain":"www.zendesk.com","TenantGuid":"1e4478
2024-09-29 13:46:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:50 UTC	597	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.zendesk.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:50 UTC	370	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:50 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cac6bf26904183d-EWR
2024-09-29 13:46:50 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:51 UTC	557	OUT	GET /scripttemplates/202406.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:51 UTC	859	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: 7I5y/rp4ODu7ul89ty+epQ== Last-Modified: Tue, 16 Jul 2024 22:20:01 GMT x-ms-request-id: c05e064f-501e-009c-79cf-d7e837000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 55166 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cac6bf6581343f7-EWR
2024-09-29 13:46:51 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 36 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202406.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof z)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){re
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 2e 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 Data Ascii: .BannerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConse
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 Data Ascii: reference Center - Allow All"]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed"
2024-09-29 13:46:51 UTC	1369	IN	Data Raw: 6e 61 6c 69 7a 61 74 69 6f 6e 3d 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b Data Ascii: nalization="ad_personalization",e.region="region",e.wait_for_update="wait_for_update",(e=Ae=Ae\|\|{}).granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cook

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:51 UTC	975	OUT	POST /webevents/visitWebPage?_mchNc=1727617610392&_mchCn=&_mchId=819-RRQ-060&_mchTk=_mch-zendesk.com-1727617610391-37275&_mchHo=www.zendesk.com&_mchPo=&_mchRu=%2Fhelp-center-closed%2F&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp=utm_source%3Dhelpcenter-closed__-__utm_medium%3Dpoweredbyzendesk__-__utm_campaign%3Dtext__-__utm_content%3Dz3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com HTTP/1.1 Host: 819-rrq-060.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.zendesk.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:51 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sun, 29 Sep 2024 13:46:51 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: abbbb28a-70f5-4dfc-9eed-e16010658d4a Access-Control-Allow-Origin: *
2024-09-29 13:46:51 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:52 UTC	634	OUT	GET /consent/4952526b-ac3d-4b18-88eb-7a42e6133c04/01909645-7708-7bc6-940e-46da6addf2af/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.zendesk.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:52 UTC	982	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8cac6bfd4bae1871-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 43863 Cache-Control: public, max-age=86400 Expires: Mon, 30 Sep 2024 13:46:52 GMT Last-Modified: Thu, 11 Jul 2024 01:26:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 41EV5hotCjEKP8/rUosm4A== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb94b893-001e-0084-4c31-d3c5a2000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-29 13:46:52 UTC	387	IN	Data Raw: 32 30 37 32 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 2072{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Pre
2024-09-29 13:46:52 UTC	1369	IN	Data Raw: 6f 6e 20 6d 69 67 68 74 20 62 65 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 2e 20 41 74 20 5a 65 6e 64 65 73 6b 2c 20 77 65 20 6d 61 79 20 75 73 65 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 70 75 72 70 6f 73 65 73 20 74 68 61 74 20 69 6e 63 6c 75 64 65 20 65 6e 73 75 72 69 6e 67 20 62 61 73 69 63 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 6f 75 72 20 53 69 74 65 73 3b 20 72 65 6d 65 6d 62 65 72 69 6e 67 20 75 73 65 72 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 79 6f 75 72 20 63 6f 6f 6b 69 65 20 70 72 65 66 65 72 65 6e 63 65 73 3b 20 6d 65 61 73 75 72 69 6e 67 20 74 68 65 20 65 66 66 65 63 74 69 76 65 6e Data Ascii: on might be about you, your preferences, or your device. At Zendesk, we may use this information for purposes that include ensuring basic functionality of our Sites; remembering user preferences, including your cookie preferences; measuring the effectiven
2024-09-29 13:46:52 UTC	1369	IN	Data Raw: 70 74 20 41 6c 6c 27 20 62 75 74 74 6f 6e 20 74 6f 20 61 67 72 65 65 20 74 6f 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 6f 72 20 63 6c 69 63 6b 20 27 43 6f 6f 6b 69 65 20 53 65 74 74 69 6e 67 73 27 20 74 6f 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 2e 20 54 6f 20 6f 70 74 20 6f 75 74 20 6f 66 20 6e 6f 6e 2d 65 73 73 65 6e 74 69 61 6c 20 63 6f 6f 6b 69 65 73 2c 20 63 6c 69 63 6b 20 27 52 65 6a 65 63 74 20 41 6c 6c 27 2e 3c 61 20 63 6c 61 73 73 3d 5c 22 6f 74 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 6c 69 6e 6b 5c 22 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 61 67 72 65 65 6d 65 6e 74 73 2d 61 6e 64 2d 74 65 72 6d 73 2f 63 6f 6f 6b 69 Data Ascii: pt All' button to agree to the use of cookies or click 'Cookie Settings' to manage your preferences. To opt out of non-essential cookies, click 'Reject All'.<a class=\"ot-cookie-policy-link\" href=https://www.zendesk.com/company/agreements-and-terms/cooki
2024-09-29 13:46:52 UTC	1369	IN	Data Raw: 6f 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 73 65 74 20 62 79 20 75 73 20 61 6e 64 20 63 61 6c 6c 65 64 20 66 69 72 73 74 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 2e 20 57 65 20 61 6c 73 6f 20 75 73 65 20 74 68 69 72 64 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 20 e2 80 93 20 77 68 69 63 68 20 61 72 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 61 20 64 6f 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6f 66 20 74 68 65 20 77 65 62 73 69 74 65 20 79 6f 75 20 61 72 65 20 76 69 73 69 74 69 6e 67 20 e2 80 93 20 66 6f 72 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 6d 61 72 6b 65 74 69 6e 67 20 65 66 66 6f 72 74 73 2e 20 4d 6f 72 65 20 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 77 65 20 75 73 Data Ascii: ose cookies are set by us and called first-party cookies. We also use third-party cookies which are cookies from a domain different than the domain of the website you are visiting for our advertising and marketing efforts. More specifically, we us
2024-09-29 13:46:52 UTC	1369	IN	Data Raw: 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6f 6b 69 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 73 69 74 65 73 20 75 73 69 6e 67 20 43 6c 6f 75 64 46 6c 61 72 65 2c 20 75 73 65 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 72 75 73 74 65 64 20 77 65 62 20 74 72 61 66 66 69 63 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 5f 5f 63 66 72 75 69 64 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 Data Ascii: ","IsSession":true,"Length":"0","description":"Cookie associated with sites using CloudFlare, used to identify trusted web traffic.","thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"Cookie__cfruid","DurationType":1,"categ
2024-09-29 13:46:52 UTC	1369	IN	Data Raw: 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 74 69 63 65 20 61 6e 64 20 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 Data Ascii: e information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.","thirdPartyDescripti
2024-09-29 13:46:52 UTC	1082	IN	Data Raw: 6f 6e 22 3a 22 53 74 6f 72 65 73 20 74 68 65 20 74 65 78 74 20 73 74 72 69 6e 67 20 6f 66 20 61 6e 20 65 6e 64 2d 75 73 65 72 e2 80 99 73 20 73 65 61 72 63 68 20 74 65 72 6d 20 69 6e 20 74 68 65 20 48 65 6c 70 20 43 65 6e 74 65 72 20 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 73 74 6f 72 65 73 20 74 68 69 73 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 63 68 65 63 6b 20 77 68 65 74 68 65 72 20 61 20 74 69 63 6b 65 74 20 77 61 73 20 63 72 65 61 74 65 64 20 61 66 74 65 72 20 74 68 61 74 20 74 65 72 6d 20 77 61 73 20 73 65 61 72 63 68 65 64 2e 20 41 20 75 73 65 72 20 69 64 65 6e 74 69 66 69 65 72 20 69 73 20 6e 6f 74 20 73 74 6f 72 65 64 20 73 6f 20 69 74 20 69 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 70 65 63 69 66 79 20 77 68 Data Ascii: on":"Stores the text string of an end-users search term in the Help Center Functionality. It stores this so that it can check whether a ticket was created after that term was searched. A user identifier is not stored so it is not possible to specify wh
2024-09-29 13:46:52 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 73 69 74 65 20 76 69 73 69 74 6f 72 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 6f 77 6e 65 64 20 62 79 20 5a 65 6e 64 65 73 6b 2e 20 41 6c 74 68 6f 75 67 68 20 6d 61 69 6e 6c 79 20 61 20 74 6f 6f 6c 20 74 6f 20 74 72 61 63 6b 20 74 69 63 6b 65 74 73 20 61 6e 64 20 73 75 70 70 6f 72 74 20 69 73 73 75 65 73 20 66 6f 72 20 61 20 63 6f 6d 70 61 6e 79 2c 20 5a 65 6e 64 65 73 6b 20 61 6c 73 6f 20 68 61 73 20 63 6f 6f 6b 69 65 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 61 70 74 75 72 65 20 61 64 76 65 72 74 69 73 69 6e 67 2d 72 65 6c 61 74 65 Data Ascii: 7ff9information that can identify the site visitor.","thirdPartyDescription":"This domain is owned by Zendesk. Although mainly a tool to track tickets and support issues for a company, Zendesk also has cookies that are used to capture advertising-relate
2024-09-29 13:46:52 UTC	1369	IN	Data Raw: 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 32 38 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4c 6f 63 61 6c 53 74 6f 72 61 67 65 20 65 6e 74 72 79 20 74 68 61 74 20 64 65 66 69 6e 65 73 20 77 68 65 6e 20 6c 73 63 61 63 68 65 2d 62 69 6c 6c 69 6e 67 2d 42 75 79 4e 6f 77 43 61 72 74 2d 62 75 79 4e 6f 77 43 61 72 74 53 74 6f 72 65 20 69 73 20 73 65 74 20 74 6f 20 65 78 70 69 72 65 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 37 2c 22 63 61 74 65 Data Ascii: "IsSession":false,"Length":"28","description":"LocalStorage entry that defines when lscache-billing-BuyNowCart-buyNowCartStore is set to expire.","thirdPartyDescription":"","patternKey":null,"thirdPartyKey":null,"firstPartyKey":null,"DurationType":7,"cate
2024-09-29 13:46:52 UTC	1369	IN	Data Raw: 72 79 20 61 73 20 77 69 74 68 6f 75 74 20 69 74 2c 20 6f 74 68 65 72 20 73 63 72 69 70 74 73 20 6d 61 79 20 6e 6f 74 20 66 75 6e 63 74 69 6f 6e 20 63 6f 72 72 65 63 74 6c 79 2e 20 54 68 65 20 65 6e 64 20 6f 66 20 74 68 65 20 6e 61 6d 65 20 69 73 20 61 20 75 6e 69 71 75 65 20 6e 75 6d 62 65 72 20 77 68 69 63 68 20 69 73 20 61 6c 73 6f 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 61 6e 20 61 73 73 6f 63 69 61 74 65 64 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 61 63 63 6f 75 6e 74 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 73 69 74 65 73 20 75 73 69 6e 67 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 Data Ascii: ry as without it, other scripts may not function correctly. The end of the name is a unique number which is also an identifier for an associated Google Analytics account.","thirdPartyDescription":"This cookie is associated with sites using Google Tag Mana

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:52 UTC	620	OUT	GET /images/logos/zendesk-favicon.svg HTTP/1.1 Host: d1eipm3vz40hy0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:52 UTC	611	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 502 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 05 Apr 2023 16:00:05 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 5gFc6eFXNaDIm6lHGy6Z8XciFskvIL0x Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 29 Sep 2024 05:25:14 GMT ETag: "f0f7ffee7058b64c45240c9fa73c8a49" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cb0a9b0d01a1b0cc9278d9875ce23c92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: oMXFrukrjd_EyqWA4NQJb0_M-FmTV85Hp8Tf1QTOEZWqtPpbmW5vNg== Age: 30099
2024-09-29 13:46:52 UTC	502	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 32 2e 34 20 31 35 33 2e 33 22 3e 0a 3c 73 74 79 6c 65 3e 2e 73 74 30 7b 66 69 6c 6c 3a 23 31 36 31 34 30 43 3b 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 2e 73 74 30 7b 66 69 6c 6c 3a 23 46 45 46 41 46 32 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 67 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 39 33 2e 35 2c 34 30 2e 35 76 31 31 32 2e 39 48 30 4c 39 33 2e 35 2c 34 30 2e 35 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="0 0 202.4 153.3"><style>.st0{fill:#16140C;}@media (prefers-color-scheme:dark){.st0{fill:#FEFAF2;}}</style><g><path class="st0" d="M93.5,40.5v112.9H0L93.5,40.5z"/><path class="st0" d="M

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:53 UTC	891	OUT	POST /pagead/landing?gcs=G111&gcu=1&gcd=13r3r3r3r5l1&tag_exp=101671035~101747727&rnd=1763388604.1727617609&url=https%3A%2F%2Fwww.zendesk.com%2Fhelp-center-closed%2F&dma=0&npa=0&gtm=45He49p0n51Z4DVv6150033za200&auid=934965234.1727617612 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.zendesk.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:53 UTC	882	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:46:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcu=1&gcd=13r3r3r3r5l1&tag_exp=101671035~101747727&rnd=1763388604.1727617609&url=https%3A%2F%2Fwww.zendesk.com%2Fhelp-center-closed%2F&dma=0&npa=0&gtm=45He49p0n51Z4DVv6150033za200&auid=934965234.1727617612 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:46:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:53 UTC	1738	OUT	POST /g/collect?v=2&tid=G-FBP7C61M6Z&gtm=45je49p0v885751806za200zb6150033&_p=1727617605238&_gaz=1&gcs=G111&gcu=1&gcd=13r3r3r3r5l1&npa=0&dma=0&tag_exp=101671035~101747727&gdid=dYWJhMj&gcut=3&cid=1408856535.1727617609&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EA&_s=3&dl=https%3A%2F%2Fwww.zendesk.com%2Fhelp-center-closed%2F%3Futm_source%3Dhelpcenter-closed%26utm_medium%3Dpoweredbyzendesk%26utm_campaign%3Dtext%26utm_content%3Dz3napitest-3d09c5f29bdf344abea03227bd0e6815.zendesk.com&dr=&sid=1727617609&sct=1&seg=0&dt=Help%20Center%20Closed&en=user_engagement&ep.gtm_container_id=GTM-Z4DV&ep.gtm_container_version=762&ep.user_agent_string=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&ep.content_language=&ep.application_version=not%20set&ep.ga_te [TRUNCATED] Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.zendesk.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.zendesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:53 UTC	846	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.zendesk.com Date: Sun, 29 Sep 2024 13:46:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close