{"report_id":"21e28d6d-9875-4d5c-a6ba-e2209e79c03d","version":0,"status":"done","tags":[],"date":"2026-10-07T05:50:29Z","url":{"schema":"https","addr":"ants.redirecthelp.com/linkedin.com/52abdba7-2710-4fc3-a0bf-a66546964fbc?psid=85482a12-0597-45fd-b029-8773c482122d","fqdn":"ants.redirecthelp.com","domain":"redirecthelp.com","tld":"com"},"ip":{"addr":"18.226.108.145","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"app.redirecthelp.com/oops.html","fqdn":"app.redirecthelp.com","domain":"redirecthelp.com","tld":"com"},"title":"Phishing Simulation","dom":{"size":7151,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"81b757679190575a038bdd2f7336927c","sha1":"09c7813edf17a113f56d9d8a9ca84f1f3e6d659d","sha256":"01e35ca8b1758fc654850ae16882ded18d3314949bd46c113b7df3f70d38b54d","sha512":"d5b8f2e70388bc7280a79d0bf4fbe5ab08f85573643a4793064e6a1bc158b2e157d38fdcfde50abfd8f610a59d87a2b5ce0ddc10ea12449bb8fc678c64a8915f","ssdeep":"96:nNYc2oWbtk6bpBiTDvb+DLtDyamlWrha7zkq7JaJXG4n+wj:uc2oWbO6lBYzADydlWtsaJ24npj","tlshash":"fee1661e22b35252a85365bd3beb27456254c00bcb0acd9c3edda644cf858767da23dc","dom_hash":"domhashd69c71e438a9173ad16ee18ba2b3154b","first_seen":"2026-10-07T05:50:30.613765Z","last_seen":"2026-10-07T05:50:30.613765Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ants.redirecthelp.com/linkedin.com/52abdba7-2710-4fc3-a0bf-a66546964fbc?psid=85482a12-0597-45fd-b029-8773c482122d","fqdn":"ants.redirecthelp.com","domain":"redirecthelp.com","tld":"com"},"ip":{"addr":"18.226.108.145","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T05:50:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"assets.redirecthelp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"assets.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"ants.redirecthelp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"ants.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"ants.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"app.redirecthelp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"app.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":4,"received_data":94104,"sent_data":2283,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ants.redirecthelp.com","ip":{"addr":"3.22.204.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-04-25","domain_rank":0,"first_seen":"2025-07-18T13:26:25.404623Z","last_seen":"2026-09-30T09:06:28.111837Z","alert_count":3,"request_count":1,"received_data":803,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}]},{"fqdn":"app.redirecthelp.com","ip":{"addr":"52.84.50.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-04-25","domain_rank":0,"first_seen":"2025-08-21T16:04:34.053687Z","last_seen":"2025-09-12T15:37:03.533982Z","alert_count":2,"request_count":1,"received_data":8072,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":7555,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.redirecthelp.com","ip":{"addr":"52.84.50.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-04-25","domain_rank":0,"first_seen":"2026-06-22T09:05:58.341062Z","last_seen":"2026-09-30T09:06:28.062899Z","alert_count":6,"request_count":3,"received_data":42682,"sent_data":1580,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Geist:wght@400;500\u0026family=Geist+Mono:wght@500\u0026family=Instrument+Serif:ital@1\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.redirecthelp.com/oops.html","date":"2026-10-07T05:50:00.037Z","timestamp":1791352200037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Geist:wght@400;500\u0026family=Geist+Mono:wght@500\u0026family=Instrument+Serif:ital@1\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.redirecthelp.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 05:50:00 GMT\r\ndate: Wed, 07 Oct 2026 05:50:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6871,"size_decoded":1503,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"38e3d1a8aa802cbe9780c853a281a868","sha1":"28090e93af6c6dfd43df2017d23f6b5564b77b0a","sha256":"5757c62cf86677963ce9aa7d1aaf2790016272104d9015fd311c25867adf4ce1","sha512":"d6121fc314161bf1d896c442fe4dce53c1c6f7a508dbc066ea8833519aaa95d43603a9f31acdeca82a73b01df3e199bc3148d02441da9bc30f0079745a786bc8","ssdeep":"192:btrJqotVwtEJZvt2v6LZYsZshV1OvW9Ovj:Z1c+JyPpE","tlshash":"f7e1ca91046bd400eb931cc237cf7f36ae8e60157445d67aabfe09dcacaac26136572d","first_seen":"2026-10-07T05:50:30.617189Z","last_seen":"2026-10-07T05:50:30.617189Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.redirecthelp.com/images/Logo.svg","fqdn":"assets.redirecthelp.com","domain":"redirecthelp.com","tld":"com"},"ip":{"addr":"52.84.50.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.redirecthelp.com/oops.html","date":"2026-10-07T05:50:00.045Z","timestamp":1791352200045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirecthelp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Jun 2026 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:9D:2D:1F:E5:39:53:EA:A2:23:01:64:C0:BA:BD:E2:B5:84:4C:A2","sha256":"EE:5D:26:16:5D:DF:08:FA:CF:24:B7:BE:8F:45:31:0C:3A:2A:A8:03:13:F7:57:A3:8E:DA:09:FF:86:71:EC:6A"}}},"request":{"raw":"GET /images/Logo.svg HTTP/1.1\r\nHost: assets.redirecthelp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.redirecthelp.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ndate: Wed, 07 Oct 2026 00:21:38 GMT\r\nlast-modified: Fri, 07 Feb 2025 23:13:48 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"1f2075a9dd655992a064a4a17f470da9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: R7z5gqUlHUbZwfY2T7daAdhXPmdazEolw5-I2qSCsLidHHNbacFeag==\r\nage: 19703\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'self' *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7180,"size_decoded":3829,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f2075a9dd655992a064a4a17f470da9","sha1":"d61d42ee165710b9e6570fe9f47a855480a6fa1b","sha256":"9d11b2edfd49a6ea2b232f30aeab59dca9d31465a12466fd1657ff720363bf80","sha512":"18db883300d274728b317197c3796b3a9f0a19837e77579890d5536bd7a9f34c830b60cc3574ca6113995d479ee88e7e2fca997b1aec9459ac8d3d27d39a4677","ssdeep":"192:MgQAPhUfLtRFPEc2PDCZx1ijzSVTEL+8sEf31s/:D3PhUjtR1Ef+zQzSVALcE+/","tlshash":"a9e155d9b39ae3d0e502e7f08e19b5b53e1b14ba3d91c5bc83eb9d50f90255e8448cc1","first_seen":"2026-10-07T05:50:30.619955Z","last_seen":"2026-10-07T05:50:30.619955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":73,"dns":0,"connect":1,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"assets.redirecthelp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"assets.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.redirecthelp.com/favicon.ico","fqdn":"assets.redirecthelp.com","domain":"redirecthelp.com","tld":"com"},"ip":{"addr":"52.84.50.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.redirecthelp.com/oops.html","date":"2026-10-07T05:50:00.152Z","timestamp":1791352200152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirecthelp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Jun 2026 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:9D:2D:1F:E5:39:53:EA:A2:23:01:64:C0:BA:BD:E2:B5:84:4C:A2","sha256":"EE:5D:26:16:5D:DF:08:FA:CF:24:B7:BE:8F:45:31:0C:3A:2A:A8:03:13:F7:57:A3:8E:DA:09:FF:86:71:EC:6A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: assets.redirecthelp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.redirecthelp.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 342\r\ndate: Mon, 05 Oct 2026 07:15:35 GMT\r\nlast-modified: Sat, 03 Oct 2026 02:03:16 GMT\r\netag: \"3155ae29eb0b59fc93bbdd6b7d4924e5\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: a0YC7sO.ca6R5BSHbG3xPUzrcdZL98wv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2auaX4gD-zU5FooQrOzS9480Ptd69ph5nFch93YeS-j4iIuw-bMZyQ==\r\nage: 167666\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'self' *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":342,"size_decoded":1152,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3155ae29eb0b59fc93bbdd6b7d4924e5","sha1":"facc9122ebf29a308dc0c56d9e6132c30c0fcf68","sha256":"785d5b7544cc66ad796314007ee08ffb9cf2f2d91a9bbc75ec011c5e37730d83","sha512":"3a9e4da7b76fb7a6b9a6a5c90663a297d53bc2f5c04cf0efda8a25665bbd6cd1c8ca23b2424009d1dd0cf4d7aaa43b8230797d73aba36461db312a71f94b4b7e","ssdeep":"","tlshash":"8be020dd6339156bd9799ef7059b4255b43336a318834048df487856a5fe4044281a93","first_seen":"2026-10-07T05:50:30.623432Z","last_seen":"2026-10-07T05:50:30.623432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"assets.redirecthelp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"assets.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.redirecthelp.com/oops.html","date":"2026-10-07T05:50:00.168Z","timestamp":1791352200168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.redirecthelp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:07:05 GMT\r\nexpires: Tue, 05 Oct 2027 16:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135775\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-10-12T14:34:41.405205Z","times_seen":7131,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":29,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.redirecthelp.com/oops.html","date":"2026-10-07T05:50:00.170Z","timestamp":1791352200170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.redirecthelp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:07:05 GMT\r\nexpires: Tue, 05 Oct 2027 16:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135775\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-10-12T14:34:41.405205Z","times_seen":7131,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":35,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3yQ6H-1_WfwkMZI_qYPLs1a-t7PU0AbeEPKK5U5Ck.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.redirecthelp.com/oops.html","date":"2026-10-07T05:50:00.173Z","timestamp":1791352200173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geistmono/v6/or3yQ6H-1_WfwkMZI_qYPLs1a-t7PU0AbeEPKK5U5Ck.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.redirecthelp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Oct 2026 12:03:38 GMT\r\nexpires: Sat, 02 Oct 2027 12:03:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 409582\r\nlast-modified: Mon, 08 Jun 2026 16:32:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10116,"size_decoded":10929,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10116, version 1.0","md5":"c15c192528ff172f5436fbd65cd6da3d","sha1":"3d62abc69eb5d4797a73f653eeace14b9c222699","sha256":"72971bd4908d3984fa1b1426bb363730e4957e16a0f58bfbca76993095715488","sha512":"a8823b5f2c20c596644bc14649c3c74c47551aefefd64a185737241dab23ef49d4e09b8ef0e9f2026b18442457b234acaee6a6a2267a6439c8ebfcdf15522d3b","ssdeep":"192:R8lnKd4JtHTLG15YcodCJQiVP08sGTT5mHS5gEgJqPScEhmS4w3tZrtWoxkxIEnV:6lnKd4Jq6c5J9bsKT5Z5gFJMWzZrxe+Y","tlshash":"3e22cf6bc98d302fc695413161b07e8f9a930b6a13503178cebb1b116f812354dd6bbf","first_seen":"2026-06-10T05:57:51.090622Z","last_seen":"2026-10-11T00:04:15.470817Z","times_seen":24,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ants.redirecthelp.com/linkedin.com/52abdba7-2710-4fc3-a0bf-a66546964fbc?psid=85482a12-0597-45fd-b029-8773c482122d","fqdn":"ants.redirecthelp.com","domain":"redirecthelp.com","tld":"com"},"ip":{"addr":"3.22.204.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T05:49:58.502Z","timestamp":1791352198502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.redirecthelp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Tue, 29 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:14:E0:A7:84:64:66:74:B2:D5:07:55:0E:CB:8E:45:C1:4B:30:B1","sha256":"0E:6F:B1:01:13:CB:DB:2F:53:21:1F:76:65:58:1A:4A:6C:C1:FC:17:E4:D9:CC:88:97:05:DB:53:3C:D0:B2:4F"}}},"request":{"raw":"GET /linkedin.com/52abdba7-2710-4fc3-a0bf-a66546964fbc?psid=85482a12-0597-45fd-b029-8773c482122d HTTP/1.1\r\nHost: ants.redirecthelp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 07 Oct 2026 05:49:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://app.redirecthelp.com/oops.html\r\nserver: uvicorn\r\nvary: Accept, Cookie, origin\r\nallow: GET, HEAD, OPTIONS\r\ncontent-security-policy: style-src; default-src 'self' assets.redirecthelp.com; upgrade-insecure-requests; frame-ancestors https://app.fablesecurity.com; form-action https://crumbs.redirecthelp.com https://ants.redirecthelp.com https://assets.fablesecurity.com https://app.redirecthelp.com; report-uri /csp-violations/report/\r\ncache-control: no-transform\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncross-origin-opener-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":15,"connect":106,"send":0,"wait":280,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"ants.redirecthelp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"ants.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"ants.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.redirecthelp.com/oops.html","fqdn":"app.redirecthelp.com","domain":"redirecthelp.com","tld":"com"},"ip":{"addr":"52.84.50.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T05:49:59.129Z","timestamp":1791352199129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirecthelp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Jun 2026 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:9D:2D:1F:E5:39:53:EA:A2:23:01:64:C0:BA:BD:E2:B5:84:4C:A2","sha256":"EE:5D:26:16:5D:DF:08:FA:CF:24:B7:BE:8F:45:31:0C:3A:2A:A8:03:13:F7:57:A3:8E:DA:09:FF:86:71:EC:6A"}}},"request":{"raw":"GET /oops.html HTTP/1.1\r\nHost: app.redirecthelp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 06 Oct 2026 22:58:30 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1WoOa1yAsk2Fdr3epliyl5oVtIlbv2EU\r\ncontent-encoding: gzip\r\ndate: Wed, 07 Oct 2026 05:50:00 GMT\r\ncache-control: no-cache, must-revalidate\r\netag: W/\"4aaff69ecb86c7fb2d7407c3f6edbca4\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Irm-iJ1NatFhDGPh_1yB59vx-DpNyZlQvDhq9g574DqhJg9pMFDPbw==\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'self' *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7287,"size_decoded":2996,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4aaff69ecb86c7fb2d7407c3f6edbca4","sha1":"886dbb1f22dd9190cfeb86f3973461cc9c4a1108","sha256":"9fa57701fbee8c0feb5daf324b949e77d63a89db2b33a624d136042fba795791","sha512":"3550d65d208fffb9f271ae8dc6a0cc3f913417622ef4cbd4d100ffd776bff6ae925102c6d8cc330f3877caf2804061d0262175a0c1aa844a4da10955fe85c5d1","ssdeep":"96:IEo6F2oWbtk6bpBiTDvb+DLtDyamlWrha7zkq7JaJXpBntwH:po6F2oWbO6lBYzADydlWtsaJZBnWH","tlshash":"72e1751e26b36252a85365bd3beb27056215c00bcb0ecd9c3edda244cf8587579e23cc","first_seen":"2026-10-07T05:50:30.633927Z","last_seen":"2026-10-07T05:50:30.633927Z","times_seen":1,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":0,"dns":39,"connect":1,"send":0,"wait":425,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"app.redirecthelp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"app.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.redirecthelp.com/img/phishing/goldfish-bag.webp","fqdn":"assets.redirecthelp.com","domain":"redirecthelp.com","tld":"com"},"ip":{"addr":"52.84.50.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.redirecthelp.com/oops.html","date":"2026-10-07T05:50:00.046Z","timestamp":1791352200046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirecthelp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Jun 2026 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:9D:2D:1F:E5:39:53:EA:A2:23:01:64:C0:BA:BD:E2:B5:84:4C:A2","sha256":"EE:5D:26:16:5D:DF:08:FA:CF:24:B7:BE:8F:45:31:0C:3A:2A:A8:03:13:F7:57:A3:8E:DA:09:FF:86:71:EC:6A"}}},"request":{"raw":"GET /img/phishing/goldfish-bag.webp HTTP/1.1\r\nHost: assets.redirecthelp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.redirecthelp.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 32830\r\naccept-ranges: bytes\r\ndate: Mon, 05 Oct 2026 07:24:36 GMT\r\nserver: AmazonS3\r\nlast-modified: Sat, 03 Oct 2026 02:03:17 GMT\r\netag: \"dea207fb0587674dc146e1511b3a5ff2\"\r\nx-amz-version-id: .5KyhTNaPbhshw4KdIL3z9I552wL_T7i\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Wqu5YCg4kk2-uV1kxu-uGyfsIYb63UzO-ACG2Qs0oA5a4DhFIxgxgA==\r\nage: 167124\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'self' *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32830,"size_decoded":33628,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 682x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dea207fb0587674dc146e1511b3a5ff2","sha1":"9242599cf6faed2121c843dcd4e6601d9b1848bd","sha256":"5375d4045d496a815b32aa8be924f80f8fe89fd367f216b3a4ad2ff488358eeb","sha512":"2a2b5af067ee1a3c4c0d03aacc7ad536a6be86b2971e3525649bff4b8a76f26a93c6b89086f36e64a7f157d8374f216ceb63fdc9ee2339ff4069c332a4409ffa","ssdeep":"768:aOxg4HGCspAzzdk5sheRsgqjbtZbY9uxdwNVUOVv1Wf0pKTGL/:aP4HEyzzisGgbtZ0AbwNVifkKE/","tlshash":"8be2f11ff3f9d132e6b63a463e257de3a1a91170880d3f0510f9e1c5e12393aac6e625","first_seen":"2026-10-07T05:50:30.635953Z","last_seen":"2026-10-07T05:50:30.635953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":73,"dns":0,"connect":1,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"assets.redirecthelp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"assets.redirecthelp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentserif/v5/jizHRFtNs2ka5fXjeivQ4LroWlx-6zAjjH7M.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.redirecthelp.com/oops.html","date":"2026-10-07T05:50:00.172Z","timestamp":1791352200172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/instrumentserif/v5/jizHRFtNs2ka5fXjeivQ4LroWlx-6zAjjH7M.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.redirecthelp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:05:02 GMT\r\nexpires: Tue, 05 Oct 2027 16:05:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135898\r\nlast-modified: Thu, 04 Sep 2025 17:19:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22128,"size_decoded":22941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22128, version 1.0","md5":"bc891bdd08ad55f22a545508466f855b","sha1":"24e6c99ca08b1e5acc92cf106c586f491ed15151","sha256":"5a51946dfffa82972bc98745359c46761515641fda557c25116459a9f83da4a7","sha512":"50f56f74de747ac5e63de8000dad47fe758d14f77a6f196938ea075e836ce29e01f98884e37f278e0a36ce50a03874af239ebf36e4c7480b3e05021b1b70f9a8","ssdeep":"384:KgIqm88WU0pMFLBCqOeANVwepCcyQxODsiuRdjccBgqirziD/pOk5Tuc:dnm88WyFlJc7CcRxOArecGqVDRF6c","tlshash":"71a2e1d844d527e287e4b4b5e530b8a6ac7ed9da8e3b266330f3a999b8484827343410","first_seen":"2025-09-11T04:20:12.966234Z","last_seen":"2026-10-12T15:04:40.979102Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}