{"report_id":"8878b390-c7b4-4c74-a276-05308c9fa730","version":0,"status":"done","tags":[],"date":"2026-06-27T01:21:27Z","url":{"schema":"https","addr":"gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"ip":{"addr":"98.91.9.77","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"title":"Microsoft SSO Sign In","dom":{"size":18198,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18194), with no line terminators","md5":"a0bc640e02e0c0f0dc3e663ed3f3178d","sha1":"b78b5dd645e6896fe3e3e1f226db837ae35ca4f9","sha256":"73f1ee68f5f3fb552557efd0007e7df4199e0a17822569ac7ff2e45a3436f305","sha512":"cea4a07883b5c7e811ef6083b781316aa9d0993d85d2c70984e5ed5b6b686f66ab82215f6e271c8df11072347c7855af15c88230fa6fad2d576b7ff580626ffd","ssdeep":"192:EhZijK3pt1X3IOIxVjzrQjVooMTjQT4OK1T4u2bNj+T4YDrfj2rKh94Ij2:qj3pt1X3IOIvroooRTlYTb8ETvr6rONi","tlshash":"a1823462d991c04b7211c558ebe1be5e3b49d385db0b0b54f5fc2166eb8aca08c671ec","dom_hash":"domhasha846c08e160c5f6490ef441228c71b6f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"ip":{"addr":"98.91.9.77","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T01:21:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"usecure.s3.eu-west-1.amazonaws.com","ip":{"addr":"52.92.19.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2005-08-18","domain_rank":3954981,"first_seen":"2022-11-25T10:25:25Z","last_seen":"2026-06-19T14:14:46.324833Z","alert_count":0,"request_count":5,"received_data":212421,"sent_data":2738,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":4,"received_data":16079,"sent_data":1880,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gohelpdesk.co.uk","ip":{"addr":"98.91.9.77","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2017-03-23","domain_rank":3206875,"first_seen":"2019-07-05T11:03:53Z","last_seen":"2026-06-03T15:48:10.206485Z","alert_count":12,"request_count":5,"received_data":424216,"sent_data":3676,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":5,"received_data":179665,"sent_data":2805,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gohelpdesk.co.uk/js/usecure.bundle.js?v=64e042e2-7782-40e3-b21c-9d9d75b6365b","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"ip":{"addr":"98.91.9.77","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd5aaddb849f21db611ac5c86effbbd","sha1":"7d057ebaa43ce207ebbe8a9b2e7826f9d6397bdd","sha256":"55fc3741e2f0c5cbb0c8f81bab24068ba29bb71709424dc951af0b78d74f1c7d","sha512":"042109696481f27dca51077cee0f049c9f4a690b4b37d0174373b484b70bf7b81c5e557f7145e90dc7bb3da9ef2e10ab1ada65328940f8b6b2c1705aa3fec49a","ssdeep":"3072:Vsak62MpSYSMrPzd5hlQslJqbjQsb0Y0irjq1b0tIH1QtKvTYHxD5JQrOPZxPTQR:iAF9XhHsb0Vir2YHN8rOPZeR88","tlshash":"c284f998bed2f0a647f361e4802f580be1371a6c684d9590fb96c5c56c7898f8137f2e","size":397537,"data":"","first_seen":"2026-06-17T13:19:31.484726Z","last_seen":"2026-07-19T15:50:12.24924Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"map[actor:server1.conn0.watcher16.process7//obj21 class:RegExp displayString:/./ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://gohelpdesk.co.uk/js/usecure.bundle.js?v=64e042e2-7782-40e3-b21c-9d9d75b6365b","line_number":2,"column_number":81471}]},"http":[{"url":{"schema":"https","addr":"usecure.s3.eu-west-1.amazonaws.com/wysiwyg1780977757757-wysiwyg1756691268191-Screenshot_%2837%29.png","fqdn":"usecure.s3.eu-west-1.amazonaws.com","domain":"usecure.s3.eu-west-1.amazonaws.com","tld":"s3.eu-west-1.amazonaws.com"},"ip":{"addr":"52.92.19.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.523Z","timestamp":1782523261523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-eu-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:6F:C1:FB:1F:1E:AD:F5:AB:FC:A0:9C:B4:0E:C6:91:D9:B2:CD:D4","sha256":"E5:79:9A:D8:27:48:04:B2:15:F7:4D:13:7B:45:41:A1:87:CC:8A:D4:88:D0:BB:3C:CE:18:FA:64:4C:6C:57:E2"}}},"request":{"raw":"GET /wysiwyg1780977757757-wysiwyg1756691268191-Screenshot_%2837%29.png HTTP/1.1\r\nHost: usecure.s3.eu-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QbrM5x5dfuYbC54gaSyFhAESrZURMDXEHMdYJuXhJA1fKfaum1J9fqzg7AiyfM3nmpoXn5jJtVs=\r\nx-amz-request-id: FAD11ZWZSEGEVVDW\r\nDate: Sat, 27 Jun 2026 01:21:06 GMT\r\nLast-Modified: Tue, 09 Jun 2026 04:02:39 GMT\r\nETag: \"2d1f4ad72a5acf321455595efeafffd4\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 10791\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10791,"size_decoded":11187,"mime_type":"image/png","magic":"PNG image data, 363 x 90, 8-bit/color RGBA, non-interlaced","md5":"2d1f4ad72a5acf321455595efeafffd4","sha1":"be0dca5db1add4d9588650b19e818cd17a96e12d","sha256":"d9fa4088c85a7698706f173eed19f4dbad8669a8a762c80f8490bd96b7268da4","sha512":"407c2291399bc593b340a611b7cc42ed46cc69431988337e6c7e913abb83afda8b103ccd78e34dc07e99adb843ea29f59358211877342df562b47dc07254a7ed","ssdeep":"192:vkX7miTyRZAil0W6eZV7+vDunyGM+nYSHfGc47WFAn2ffS9x8/Ps6l3o:vkXqibiSW6eZobutqxRvn23S9x8s6Jo","tlshash":"8622aebbce8c9ec3a11b1080622361076a7ad3f0e5b252e789ee7e9c5c4dd4141a1f4c","first_seen":"2025-12-16T10:00:58.371813Z","last_seen":"2026-07-19T15:50:12.233144Z","times_seen":151,"resource_available":false,"data":null}},"time_used":4157,"timings":{"blocked":323,"dns":0,"connect":31,"send":0,"wait":57,"receive":31,"ssl":3714},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:02.547Z","timestamp":1782523262547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 01:21:02 GMT\r\ndate: Sat, 27 Jun 2026 01:21:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2415,"size_decoded":1280,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"937c0f60d71292a5a8d1cbdbc6c80621","sha1":"3a15491027d6ba63d9720887c07b9677aa405a16","sha256":"109ce15b2cae910659d99ca36afcbdc552669aac69736f67af8d552e0e292117","sha512":"9c7c3bb34a0cc0ed674bc891e4007e5068c50658f104157ef46ba909230b2eb8901d2436240d7785417347ffc021dcf5786b55d3e6253aab323fd28e33a54beb","ssdeep":"","tlshash":"53419ef3401ea84897a31cca23de3e369e4f65106186d17adffd085cec75c2a5264b1d","first_seen":"2025-09-11T21:22:52.791197Z","last_seen":"2026-07-21T15:04:43.68465Z","times_seen":3059,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gohelpdesk.co.uk/record-simulation-event?rg=eu","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"ip":{"addr":"98.91.9.77","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:02.832Z","timestamp":1782523262832,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asistenciahoy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 09:31:06 GMT","end":"Thu, 24 Sep 2026 09:31:05 GMT"},"fingerprint":{"sha1":"5B:CD:35:A6:17:21:B2:70:4D:C9:06:69:6E:66:A4:C0:76:5E:F0:0D","sha256":"24:F1:C1:AD:D7:DD:CE:F2:35:BE:A6:22:D5:C1:FE:68:BD:C3:35:E1:13:78:02:7A:3E:03:02:FE:D6:46:CB:EF"}}},"request":{"raw":"POST /record-simulation-event?rg=eu HTTP/1.1\r\nHost: gohelpdesk.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 81\r\nOrigin: https://gohelpdesk.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AWSALB=jcLSAYogjI86ZoHDwL3hDdRVpeZQm/YzfDp6pQDelvGfrtJAzbsJpVDrstbArGp67nlTe9aILEOYNWPF86Nl14j7dSnmm2To4Utc1PoXrQSVqB5xwPeeesS3eLjN; AWSALBCORS=jcLSAYogjI86ZoHDwL3hDdRVpeZQm/YzfDp6pQDelvGfrtJAzbsJpVDrstbArGp67nlTe9aILEOYNWPF86Nl14j7dSnmm2To4Utc1PoXrQSVqB5xwPeeesS3eLjN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sat, 27 Jun 2026 01:21:03 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 102\r\nConnection: keep-alive\r\nEtag: W/\"66-dq6haF/vzEwOkM1NeLF+i5rJvng\"\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https://*.amazonaws.com https://*.usecure.io https://*.user-training.com;font-src 'self' data: https:;connect-src 'self';frame-src 'self';frame-ancestors 'self' https://*.usecure.io https://*.user-training.com;media-src 'self';base-uri 'self';form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Dns-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Xss-Protection: 0\r\nAccess-Control-Allow-Origin: *\r\nVia: 1.1 2510b8fd8f66d8d997f4df0d6c348a18.cloudfront.net (CloudFront)\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nSet-Cookie: AWSALB=YOl3TqWDfHQCuYZbcJp7Taz/WF8ib6zsOw0qVTwG1KT7HGm0bNBiQ6cqRqPc9jMEsaPUGKZiwCrw4ztx/pFQV/LnCu+vaE+8hEzNleVkCnHCzvLcd0WksufB693Z; Expires=Sat, 04 Jul 2026 01:21:02 GMT; Path=/; Secure\nAWSALBCORS=YOl3TqWDfHQCuYZbcJp7Taz/WF8ib6zsOw0qVTwG1KT7HGm0bNBiQ6cqRqPc9jMEsaPUGKZiwCrw4ztx/pFQV/LnCu+vaE+8hEzNleVkCnHCzvLcd0WksufB693Z; Expires=Sat, 04 Jul 2026 01:21:02 GMT; Path=/; SameSite=None; Secure\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102,"size_decoded":1730,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2afaca1c58373586e3d8524b3015aefe","sha1":"76aea1685fefcc4c0e90cd4d78b17e8b9ac9be78","sha256":"a7566202556efa9bd5157392ae128184210398961fc6203eddfecaa2af889c9c","sha512":"15fac836abab93fd69f9ae097dc253908f84ed6755ae856be55c5d2024e773988c12057b383fb60730c572e026d90de094571b3a4f63284ff4a563940ef4f5d6","ssdeep":"","tlshash":"d3b09232c1b3f536900c44e08800bdc7150c748780020d316345378055d2871bbe8000","first_seen":"2026-06-27T01:21:31.158918Z","last_seen":"2026-06-27T01:21:31.158918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Cabin:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.512Z","timestamp":1782523261512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Cabin:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 01:21:01 GMT\r\ndate: Sat, 27 Jun 2026 01:21:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2526,"size_decoded":1176,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9be6cd7b1f08643029206976cd95a603","sha1":"ca33e0b97a0d599213504e56835a6b232cec316e","sha256":"9ebf5ab1458c3627403811471131772bae09e764fc6d02b2d93ed4ef3ac6a9fd","sha512":"090957938cf0d1ffb78c2161c1d48087f8a01c9594421350c606cb9bfcc581ca1d5dc0d0210231a68732a1faff49aecf8cf42d3125d5e37a6b0cf97813541613","ssdeep":"","tlshash":"c151df62083a5540e3934cd223ce7d32de4eb19474489839bffe1498eca7c36a369b1d","first_seen":"2025-09-13T02:57:20.013374Z","last_seen":"2026-07-21T08:10:43.269581Z","times_seen":1943,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":66,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usecure.s3.eu-west-1.amazonaws.com/wysiwyg1780980984800-3a.png","fqdn":"usecure.s3.eu-west-1.amazonaws.com","domain":"usecure.s3.eu-west-1.amazonaws.com","tld":"s3.eu-west-1.amazonaws.com"},"ip":{"addr":"52.92.19.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.528Z","timestamp":1782523261528,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-eu-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:6F:C1:FB:1F:1E:AD:F5:AB:FC:A0:9C:B4:0E:C6:91:D9:B2:CD:D4","sha256":"E5:79:9A:D8:27:48:04:B2:15:F7:4D:13:7B:45:41:A1:87:CC:8A:D4:88:D0:BB:3C:CE:18:FA:64:4C:6C:57:E2"}}},"request":{"raw":"GET /wysiwyg1780980984800-3a.png HTTP/1.1\r\nHost: usecure.s3.eu-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jmEzaz1ypzq7iOuZn4SzgcJjDBIJFR+rYYWi5/wBums+EYHdOULUszf7MeXO1RRCtVkRzvkqJsg=\r\nx-amz-request-id: FAD8BS5RP9WHC64T\r\nDate: Sat, 27 Jun 2026 01:21:06 GMT\r\nLast-Modified: Tue, 09 Jun 2026 04:56:26 GMT\r\nETag: \"56fe67454a29e44e02053f7b365514ff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 31046\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":31046,"size_decoded":31442,"mime_type":"image/png","magic":"PNG image data, 1265 x 1269, 8-bit/color RGBA, non-interlaced","md5":"56fe67454a29e44e02053f7b365514ff","sha1":"cd96d976070a99bd670ae8dc949ca2f40a88d343","sha256":"3a2933627236236546c6a2d671b6f1b0b401e1a2f4c5d9c1cd5950d5d0d58f50","sha512":"c39a749a072561b0dedd162fade386acfad1830392414490d27eea1c231535ca2c240dd1ba193d57554bebba747cbfa4230e2be58c635de8ff8eef1f339b0be7","ssdeep":"768:46Ao/wzJz+4W4FHAu7Jk29AlALOopaFfc5VuCVXBFUA:WswtWKdk6rLBGkLusXDUA","tlshash":"19d2bfa64d7fecb4fa4081391c298a46b67d5c892b1f7f170bb1929bae31c0255c748b","first_seen":"2026-06-27T01:21:31.160821Z","last_seen":"2026-07-19T15:50:12.238684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4486,"timings":{"blocked":323,"dns":0,"connect":32,"send":0,"wait":57,"receive":95,"ssl":3976},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.963Z","timestamp":1782523261963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gohelpdesk.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 03:44:31 GMT\r\nexpires: Fri, 25 Jun 2027 03:44:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164191\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28320,"size_decoded":29133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28320, version 1.0","md5":"44691444dd981153f160a086f24bb7d5","sha1":"a104b4cdabfcc943b559a3967d531e56c0955f17","sha256":"f51448b0b7f024d139fb7598d21b4e06e8174268ac93fc26cc2d4196144cb672","sha512":"6243c4d625704ebb0b5acfa2318a5efac5329ef5640e8825a8a103fb1c6c0042b3e48ff90781e78fb015abc3b9dcb417c957ef034f61949f07498fb73a40612d","ssdeep":"768:oqEBPQTG+amXUdSgtBWKwLbTNvi7T2en5o19Y+dLjah9a/Woxh:YlQTBxIXdibTNvIo19Xjuoxh","tlshash":"8cd2e12ee1bf62e4ab337d3f8ad7728cdf6f2c14088860475870ae63d4a17551196e91","first_seen":"2025-06-02T21:09:25.198343Z","last_seen":"2026-07-21T16:04:46.558204Z","times_seen":8235,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":49,"dns":2,"connect":0,"send":0,"wait":50,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://gohelpdesk.co.uk/itsgonnafail","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"ip":{"addr":"98.91.9.77","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:02.550Z","timestamp":1782523262550,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asistenciahoy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 09:31:06 GMT","end":"Thu, 24 Sep 2026 09:31:05 GMT"},"fingerprint":{"sha1":"5B:CD:35:A6:17:21:B2:70:4D:C9:06:69:6E:66:A4:C0:76:5E:F0:0D","sha256":"24:F1:C1:AD:D7:DD:CE:F2:35:BE:A6:22:D5:C1:FE:68:BD:C3:35:E1:13:78:02:7A:3E:03:02:FE:D6:46:CB:EF"}}},"request":{"raw":"GET /itsgonnafail HTTP/1.1\r\nHost: gohelpdesk.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gohelpdesk.co.uk\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: WCqPyBk0dtNU233EiOxADw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: AWSALB=jcLSAYogjI86ZoHDwL3hDdRVpeZQm/YzfDp6pQDelvGfrtJAzbsJpVDrstbArGp67nlTe9aILEOYNWPF86Nl14j7dSnmm2To4Utc1PoXrQSVqB5xwPeeesS3eLjN; AWSALBCORS=jcLSAYogjI86ZoHDwL3hDdRVpeZQm/YzfDp6pQDelvGfrtJAzbsJpVDrstbArGp67nlTe9aILEOYNWPF86Nl14j7dSnmm2To4Utc1PoXrQSVqB5xwPeeesS3eLjN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.30.2\r\nDate: Sat, 27 Jun 2026 01:21:02 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 189\r\nConnection: keep-alive\r\nETag: W/\"bd-q+ifm/t1a737L1NUIOELtWJetOI\"\r\nSet-Cookie: AWSALB=iOE+43bayL9EYZIMjuJmWcYPpoxzdd45K3vLWfFrBilSa94rNZUwrhotyMB8ir9MCTHpJIyUIjumeXDIFMs71HTGs7YqFPAC/pvKmZ5iuovn/gKbkDt6TxihUBqB; Expires=Sat, 04 Jul 2026 01:21:02 GMT; Path=/\nAWSALBCORS=iOE+43bayL9EYZIMjuJmWcYPpoxzdd45K3vLWfFrBilSa94rNZUwrhotyMB8ir9MCTHpJIyUIjumeXDIFMs71HTGs7YqFPAC/pvKmZ5iuovn/gKbkDt6TxihUBqB; Expires=Sat, 04 Jul 2026 01:21:02 GMT; Path=/; SameSite=None\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https://*.amazonaws.com https://*.usecure.io https://*.user-training.com;font-src 'self' data: https:;connect-src 'self';frame-src 'self';frame-ancestors 'self' https://*.usecure.io https://*.user-training.com;media-src 'self';base-uri 'self';form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 0\r\nAccess-Control-Allow-Origin: *\r\nVia: 1.1 d50dfba7cdc75e038fa691e4f574341a.cloudfront.net (CloudFront)\r\nAlt-Svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.509Z","timestamp":1782523261509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Rubik:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 01:21:01 GMT\r\ndate: Sat, 27 Jun 2026 01:21:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4988,"size_decoded":1457,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"be04baf09f1bcf3d403b36ce6c72a7e7","sha1":"6077dc14bd392ad039d94a4b3672bd42a3a7275d","sha256":"80c4f4ed257aa2d73e5f80df8c091a834db94e688b36a421d4238c697723b3db","sha512":"f17cbc0bd89a20d38fdf8758e9019316ac0acf9af904894fc2c16bd971d81a75e0216ec2bd67254772584819c15d93d145c73bfffc4aeb9178e2d00114ff583d","ssdeep":"96:dQOLKA0Zl8DCK9cHoQOLGHwQOL/FZSQOLxQOLEJc+uJQOLGNUQOCKA0Zl8DCK9cy:DhCl+sGAvAE8hCl3sflWAJp","tlshash":"00a1bbe1981e54447f472cc263ce2d33de0e6255309485299afe1f9aacbbc2273617ce","first_seen":"2025-09-10T17:31:22.147596Z","last_seen":"2026-07-19T15:50:12.231318Z","times_seen":132,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":67,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.514Z","timestamp":1782523261514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Raleway:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 01:21:01 GMT\r\ndate: Sat, 27 Jun 2026 01:21:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3454,"size_decoded":1254,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d08c6206d998fe1c94a8f7020b5a666f","sha1":"c5dd04424a8199c8d872428e9808a4ca7590ea66","sha256":"3c202c33dc28c82a21c96cb36ff7a5fadc87861a09307ef6bcea2f6d54494269","sha512":"2cd24762bf7bb0f5fc8614b724f7c87af9c3e5f654fac8870d3f7a7e82a111b4b4aa9aef0c7114e68938288e8549f8b2289d22a8a6af421492a7c6f9ea0fc5b6","ssdeep":"","tlshash":"5761aea10917d400eb476dda63ce3e36ee4e62043047953a9bfe58bcbca6d36139070d","first_seen":"2025-09-11T01:47:30.862415Z","last_seen":"2026-07-21T14:14:03.652571Z","times_seen":1021,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":95,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usecure.s3.eu-west-1.amazonaws.com/wysiwyg1780978444365-1a.png","fqdn":"usecure.s3.eu-west-1.amazonaws.com","domain":"usecure.s3.eu-west-1.amazonaws.com","tld":"s3.eu-west-1.amazonaws.com"},"ip":{"addr":"52.92.19.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.525Z","timestamp":1782523261525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-eu-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:6F:C1:FB:1F:1E:AD:F5:AB:FC:A0:9C:B4:0E:C6:91:D9:B2:CD:D4","sha256":"E5:79:9A:D8:27:48:04:B2:15:F7:4D:13:7B:45:41:A1:87:CC:8A:D4:88:D0:BB:3C:CE:18:FA:64:4C:6C:57:E2"}}},"request":{"raw":"GET /wysiwyg1780978444365-1a.png HTTP/1.1\r\nHost: usecure.s3.eu-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: G/0wOZ+I9K99RzbCGpce5lsibY2/AsP+OKU9KMelK8wCQuH2FrEUeFTLv+MmwxlmVhtOH+WreKc=\r\nx-amz-request-id: FAD50YYWMJWB5F7C\r\nDate: Sat, 27 Jun 2026 01:21:06 GMT\r\nLast-Modified: Tue, 09 Jun 2026 04:14:06 GMT\r\nETag: \"282f81f5eede82eae2311fecc1b42742\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 57227\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57227,"size_decoded":57623,"mime_type":"image/png","magic":"PNG image data, 1265 x 1269, 8-bit/color RGBA, non-interlaced","md5":"282f81f5eede82eae2311fecc1b42742","sha1":"fe30d5d4c117d9ca1a7554b505d6aed55f704d2b","sha256":"713b7cd44fbd7d83cd7916e143c093adeef58f115ca135080a44a32b9e5ad24f","sha512":"6120f98b245c5c5d8402c45a81521fe4acc21e27aba05d9a685c9d04716108587bafdfb9b795fd20789d3fdb1c21b31348d6dbab37eb1201cb76349b523128be","ssdeep":"1536:qLciEMLUtXNnFrbRW1xA1wX2Q6Z+tecywT6LfLWfrs93:qogONnFHEfRtecWLzWf4N","tlshash":"5f43f142cc50e846d03f867d38ffc7e0993588b8184d6d9eb96eba0da9c11d25468aed","first_seen":"2026-06-27T01:21:31.182632Z","last_seen":"2026-07-19T15:50:12.252261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4566,"timings":{"blocked":323,"dns":0,"connect":32,"send":0,"wait":55,"receive":188,"ssl":3967},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usecure.s3.eu-west-1.amazonaws.com/wysiwyg1780978792918-2a.png","fqdn":"usecure.s3.eu-west-1.amazonaws.com","domain":"usecure.s3.eu-west-1.amazonaws.com","tld":"s3.eu-west-1.amazonaws.com"},"ip":{"addr":"52.92.19.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.527Z","timestamp":1782523261527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-eu-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:6F:C1:FB:1F:1E:AD:F5:AB:FC:A0:9C:B4:0E:C6:91:D9:B2:CD:D4","sha256":"E5:79:9A:D8:27:48:04:B2:15:F7:4D:13:7B:45:41:A1:87:CC:8A:D4:88:D0:BB:3C:CE:18:FA:64:4C:6C:57:E2"}}},"request":{"raw":"GET /wysiwyg1780978792918-2a.png HTTP/1.1\r\nHost: usecure.s3.eu-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: nKnFZmgVSn3gs/dj5ygwWnjpIRcmZPDwJacSB7Jqa8hpxQzHMmA0hkYxGHWcdh0w34cWzEh/gek=\r\nx-amz-request-id: FADBEV2RK7V9M4D9\r\nDate: Sat, 27 Jun 2026 01:21:06 GMT\r\nLast-Modified: Tue, 09 Jun 2026 04:19:54 GMT\r\nETag: \"7b13fcebbbbd38cb4fae15fdde878177\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 67917\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":67917,"size_decoded":68313,"mime_type":"image/png","magic":"PNG image data, 1265 x 1269, 8-bit/color RGBA, non-interlaced","md5":"7b13fcebbbbd38cb4fae15fdde878177","sha1":"42f0d7765f6ca220bef4a790db235d036e3c26f1","sha256":"cab2213a1c72b69f36a6e7dc107aafb4d4eccd94d90c4027c09fd467a245af12","sha512":"04a65a128b5daf17d171ab35ec8b133c188da515bc5b0a54cea13b6ad4772d2eb8469a5ff8e9f30c20e71a0e4237881e62fd8e59bc3614bec8d636c2416251f3","ssdeep":"1536:IB2upzmnp/dVU8Ap2yGVOfCghesyc/MclEje:Igmz8VUr3fCEwDqB","tlshash":"da63f1cfe244f4ddc64c8274ea59ef5abfd321a3485847a8baf5e3750ac24462ac74d0","first_seen":"2026-06-27T01:21:31.183582Z","last_seen":"2026-07-19T15:50:12.261164Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4620,"timings":{"blocked":323,"dns":0,"connect":32,"send":0,"wait":56,"receive":220,"ssl":3985},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.964Z","timestamp":1782523261964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gohelpdesk.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 03:44:31 GMT\r\nexpires: Fri, 25 Jun 2027 03:44:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164191\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28320,"size_decoded":29133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28320, version 1.0","md5":"44691444dd981153f160a086f24bb7d5","sha1":"a104b4cdabfcc943b559a3967d531e56c0955f17","sha256":"f51448b0b7f024d139fb7598d21b4e06e8174268ac93fc26cc2d4196144cb672","sha512":"6243c4d625704ebb0b5acfa2318a5efac5329ef5640e8825a8a103fb1c6c0042b3e48ff90781e78fb015abc3b9dcb417c957ef034f61949f07498fb73a40612d","ssdeep":"768:oqEBPQTG+amXUdSgtBWKwLbTNvi7T2en5o19Y+dLjah9a/Woxh:YlQTBxIXdibTNvIo19Xjuoxh","tlshash":"8cd2e12ee1bf62e4ab337d3f8ad7728cdf6f2c14088860475870ae63d4a17551196e91","first_seen":"2025-06-02T21:09:25.198343Z","last_seen":"2026-07-21T16:04:46.558204Z","times_seen":8235,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":49,"dns":1,"connect":0,"send":0,"wait":34,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"ip":{"addr":"98.91.9.77","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T01:21:00.474Z","timestamp":1782523260474,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asistenciahoy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 09:31:06 GMT","end":"Thu, 24 Sep 2026 09:31:05 GMT"},"fingerprint":{"sha1":"5B:CD:35:A6:17:21:B2:70:4D:C9:06:69:6E:66:A4:C0:76:5E:F0:0D","sha256":"24:F1:C1:AD:D7:DD:CE:F2:35:BE:A6:22:D5:C1:FE:68:BD:C3:35:E1:13:78:02:7A:3E:03:02:FE:D6:46:CB:EF"}}},"request":{"raw":"GET /?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu HTTP/1.1\r\nHost: gohelpdesk.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sat, 27 Jun 2026 01:21:00 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nEtag: W/\"46bf-59kKWkNoFdVbSw7qknwQ12u8giU\"\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https://*.amazonaws.com https://*.usecure.io https://*.user-training.com;font-src 'self' data: https:;connect-src 'self';frame-src 'self';frame-ancestors 'self' https://*.usecure.io https://*.user-training.com;media-src 'self';base-uri 'self';form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Dns-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Xss-Protection: 0\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nVia: 1.1 9be9efa555fb3981d71671e41c8c568e.cloudfront.net (CloudFront)\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nSet-Cookie: AWSALB=GhTa14lVE6ZS4bwaXc+4F8gDzJkpziovsFsFQOMmmrybQGr5FiJmkBLdaPbcQWcJjr79HStwV/hukB2JP7Nxh01XUMqWYcvoMkzsgSd6nklcy+pHtWLtw8hd4dWH; Expires=Sat, 04 Jul 2026 01:21:00 GMT; Path=/; Secure\nAWSALBCORS=GhTa14lVE6ZS4bwaXc+4F8gDzJkpziovsFsFQOMmmrybQGr5FiJmkBLdaPbcQWcJjr79HStwV/hukB2JP7Nxh01XUMqWYcvoMkzsgSd6nklcy+pHtWLtw8hd4dWH; Expires=Sat, 04 Jul 2026 01:21:00 GMT; Path=/; SameSite=None; Secure\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":18111,"size_decoded":5646,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18107), with no line terminators","md5":"ea08d5b37937e708d6f182035a2aac39","sha1":"e7d90a5a436815d55b4b0eea927c10d76bbc8225","sha256":"68a95f7e34579cd8f00eaa7df80976cedc69744614fd39fd760b60d786044c88","sha512":"b126b2e9f30f242396407dc2c8cf89d4ba0df769378887be431266d0bd3074beeea558f18e9f014baf483b8a621fe0972d280a4c6ece79edc0895a267f8a1986","ssdeep":"192:4hZijK3pt1X3IOIxCjzrQjVooMTjQT4OK1T4u2bNj+T4YDrfj2rKh94Ij2:uj3pt1X3IOIaroooRTlYTb8ETvr6rONi","tlshash":"ac823462dd91c04b7211c558ebe1be5e3b49e385db0b0b54f5fc2166eb8aca08c671ec","first_seen":"2026-06-27T01:21:31.184578Z","last_seen":"2026-06-27T01:21:31.184578Z","times_seen":1,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":21,"connect":92,"send":0,"wait":263,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usecure.s3.eu-west-1.amazonaws.com/wysiwyg1780979356378-4a.png","fqdn":"usecure.s3.eu-west-1.amazonaws.com","domain":"usecure.s3.eu-west-1.amazonaws.com","tld":"s3.eu-west-1.amazonaws.com"},"ip":{"addr":"52.92.19.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.529Z","timestamp":1782523261529,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-eu-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:6F:C1:FB:1F:1E:AD:F5:AB:FC:A0:9C:B4:0E:C6:91:D9:B2:CD:D4","sha256":"E5:79:9A:D8:27:48:04:B2:15:F7:4D:13:7B:45:41:A1:87:CC:8A:D4:88:D0:BB:3C:CE:18:FA:64:4C:6C:57:E2"}}},"request":{"raw":"GET /wysiwyg1780979356378-4a.png HTTP/1.1\r\nHost: usecure.s3.eu-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GmO4kM93WFN1UntVD6ZkkGhDdiODvfwv/MNWleoMvF87wP/Fgu40TUTOd1IJSvZYOucyqew7mC0=\r\nx-amz-request-id: FAD9EN9TQQWSVFBG\r\nDate: Sat, 27 Jun 2026 01:21:06 GMT\r\nLast-Modified: Tue, 09 Jun 2026 04:29:18 GMT\r\nETag: \"5766c0fa3b1bdacebe0dfeabb2fae78a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 43460\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":43460,"size_decoded":43856,"mime_type":"image/png","magic":"PNG image data, 1265 x 1269, 8-bit/color RGBA, non-interlaced","md5":"5766c0fa3b1bdacebe0dfeabb2fae78a","sha1":"c953d7282e966c067d9e367d8692ceb85e123285","sha256":"1cf1b2ab979195685c21e8f13b60b5bce003361949b5bd7d967dbc4941c918c8","sha512":"98fef469c1e8197743cebac7fa0d55453af6599663cabfb511c7a14d1969f5d3a8f8345d5f849053c73473ae3858af998541500bc7138f75cfa0750ddf39a35e","ssdeep":"768:4AnnnnnnnnnnnnnnnnnnnnnEGfNY6SmQr8J5zx8P5JGkaY6rh0mp0gPCYFSTeoZd:hnnnnnnnnnnnnnnnnnnnnn3emQruwBJt","tlshash":"7113bf7590f7a9c3e088c6ffaf12655b708d4488ca297f74de1d465ca98088f44dbe8c","first_seen":"2026-06-27T01:21:31.185559Z","last_seen":"2026-07-19T15:50:12.262412Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4503,"timings":{"blocked":323,"dns":0,"connect":32,"send":0,"wait":56,"receive":125,"ssl":3966},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.959Z","timestamp":1782523261959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gohelpdesk.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 11:19:54 GMT\r\nexpires: Mon, 21 Jun 2027 11:19:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 482468\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":35348,"size_decoded":36161,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-07-21T16:39:47.211247Z","times_seen":31928,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":5,"connect":49,"send":0,"wait":63,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.961Z","timestamp":1782523261961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gohelpdesk.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 11:19:54 GMT\r\nexpires: Mon, 21 Jun 2027 11:19:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 482468\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":35348,"size_decoded":36161,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-07-21T16:39:47.211247Z","times_seen":31928,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":51,"dns":3,"connect":0,"send":0,"wait":92,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.966Z","timestamp":1782523261966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gohelpdesk.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 10:14:15 GMT\r\nexpires: Mon, 21 Jun 2027 10:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 486407\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-21T16:29:08.815812Z","times_seen":60440,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":79,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gohelpdesk.co.uk/favicon.ico","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"ip":{"addr":"98.91.9.77","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:03.613Z","timestamp":1782523263613,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asistenciahoy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 09:31:06 GMT","end":"Thu, 24 Sep 2026 09:31:05 GMT"},"fingerprint":{"sha1":"5B:CD:35:A6:17:21:B2:70:4D:C9:06:69:6E:66:A4:C0:76:5E:F0:0D","sha256":"24:F1:C1:AD:D7:DD:CE:F2:35:BE:A6:22:D5:C1:FE:68:BD:C3:35:E1:13:78:02:7A:3E:03:02:FE:D6:46:CB:EF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gohelpdesk.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AWSALB=YOl3TqWDfHQCuYZbcJp7Taz/WF8ib6zsOw0qVTwG1KT7HGm0bNBiQ6cqRqPc9jMEsaPUGKZiwCrw4ztx/pFQV/LnCu+vaE+8hEzNleVkCnHCzvLcd0WksufB693Z; AWSALBCORS=YOl3TqWDfHQCuYZbcJp7Taz/WF8ib6zsOw0qVTwG1KT7HGm0bNBiQ6cqRqPc9jMEsaPUGKZiwCrw4ztx/pFQV/LnCu+vaE+8hEzNleVkCnHCzvLcd0WksufB693Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.30.2\r\nDate: Sat, 27 Jun 2026 01:21:03 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 189\r\nConnection: keep-alive\r\nETag: W/\"bd-q+ifm/t1a737L1NUIOELtWJetOI\"\r\nSet-Cookie: AWSALB=CvIX6AQao2ACb9RFYdg9O6iVM+iRMQQmBkr3oBwVxYRPMnEfebK6A/336XK/2Y+W/rfqqLXGSiULuDijO18RhUpli76bE2YwzCdO/6fwRq/x6R2aojrvfyh3wdhk; Expires=Sat, 04 Jul 2026 01:21:03 GMT; Path=/\nAWSALBCORS=CvIX6AQao2ACb9RFYdg9O6iVM+iRMQQmBkr3oBwVxYRPMnEfebK6A/336XK/2Y+W/rfqqLXGSiULuDijO18RhUpli76bE2YwzCdO/6fwRq/x6R2aojrvfyh3wdhk; Expires=Sat, 04 Jul 2026 01:21:03 GMT; Path=/; SameSite=None\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https://*.amazonaws.com https://*.usecure.io https://*.user-training.com;font-src 'self' data: https:;connect-src 'self';frame-src 'self';frame-ancestors 'self' https://*.usecure.io https://*.user-training.com;media-src 'self';base-uri 'self';form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 0\r\nAccess-Control-Allow-Origin: *\r\nVia: 1.1 90af3db4c3266e9548f9c3f3de9c43ba.cloudfront.net (CloudFront)\r\nAlt-Svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":189,"size_decoded":1801,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"c9f6f82c0b1e2d6eb40294f876eac55e","sha1":"abe89f9bfb756bbdfb2f535420e10bb5625eb4e2","sha256":"9dcc361cf979ea9471e1076ab30724c665229614d2d7432dfe9127c8b6d3a443","sha512":"c9ad3aa05ef29513c47732c46f626674f9b55d9b3b8bd8ce2699b17e4ab02d07a2549505024e1031feb286d92ac4affbdbf8fad07a4b849757c0a62efb535b93","ssdeep":"","tlshash":"1bc080efd187728fd41324e03dc311d1594c03a7b4b645f43d807859e11417dcac659d","first_seen":"2023-04-07T07:54:01Z","last_seen":"2026-07-20T22:19:42.888593Z","times_seen":808,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gohelpdesk.co.uk/js/usecure.bundle.js?v=64e042e2-7782-40e3-b21c-9d9d75b6365b","fqdn":"gohelpdesk.co.uk","domain":"gohelpdesk.co.uk","tld":"co.uk"},"ip":{"addr":"98.91.9.77","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gohelpdesk.co.uk/?r=97e1f909-ba59-450b-a216-5420767f00a9\u0026rg=eu","date":"2026-06-27T01:21:01.517Z","timestamp":1782523261517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asistenciahoy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 09:31:06 GMT","end":"Thu, 24 Sep 2026 09:31:05 GMT"},"fingerprint":{"sha1":"5B:CD:35:A6:17:21:B2:70:4D:C9:06:69:6E:66:A4:C0:76:5E:F0:0D","sha256":"24:F1:C1:AD:D7:DD:CE:F2:35:BE:A6:22:D5:C1:FE:68:BD:C3:35:E1:13:78:02:7A:3E:03:02:FE:D6:46:CB:EF"}}},"request":{"raw":"GET /js/usecure.bundle.js?v=64e042e2-7782-40e3-b21c-9d9d75b6365b HTTP/1.1\r\nHost: gohelpdesk.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AWSALB=GhTa14lVE6ZS4bwaXc+4F8gDzJkpziovsFsFQOMmmrybQGr5FiJmkBLdaPbcQWcJjr79HStwV/hukB2JP7Nxh01XUMqWYcvoMkzsgSd6nklcy+pHtWLtw8hd4dWH; AWSALBCORS=GhTa14lVE6ZS4bwaXc+4F8gDzJkpziovsFsFQOMmmrybQGr5FiJmkBLdaPbcQWcJjr79HStwV/hukB2JP7Nxh01XUMqWYcvoMkzsgSd6nklcy+pHtWLtw8hd4dWH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sat, 27 Jun 2026 01:21:01 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nEtag: W/\"610e1-19ed07731c8\"\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https://*.amazonaws.com https://*.usecure.io https://*.user-training.com;font-src 'self' data: https:;connect-src 'self';frame-src 'self';frame-ancestors 'self' https://*.usecure.io https://*.user-training.com;media-src 'self';base-uri 'self';form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Dns-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Xss-Protection: 0\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=0\r\nLast-Modified: Tue, 16 Jun 2026 12:45:33 GMT\r\nVia: 1.1 411796dceb01ebdc0e24ce430282d2d4.cloudfront.net (CloudFront)\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nSet-Cookie: AWSALB=jcLSAYogjI86ZoHDwL3hDdRVpeZQm/YzfDp6pQDelvGfrtJAzbsJpVDrstbArGp67nlTe9aILEOYNWPF86Nl14j7dSnmm2To4Utc1PoXrQSVqB5xwPeeesS3eLjN; Expires=Sat, 04 Jul 2026 01:21:01 GMT; Path=/; Secure\nAWSALBCORS=jcLSAYogjI86ZoHDwL3hDdRVpeZQm/YzfDp6pQDelvGfrtJAzbsJpVDrstbArGp67nlTe9aILEOYNWPF86Nl14j7dSnmm2To4Utc1PoXrQSVqB5xwPeeesS3eLjN; Expires=Sat, 04 Jul 2026 01:21:01 GMT; Path=/; SameSite=None; Secure\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":397537,"size_decoded":177286,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"6bd5aaddb849f21db611ac5c86effbbd","sha1":"7d057ebaa43ce207ebbe8a9b2e7826f9d6397bdd","sha256":"55fc3741e2f0c5cbb0c8f81bab24068ba29bb71709424dc951af0b78d74f1c7d","sha512":"042109696481f27dca51077cee0f049c9f4a690b4b37d0174373b484b70bf7b81c5e557f7145e90dc7bb3da9ef2e10ab1ada65328940f8b6b2c1705aa3fec49a","ssdeep":"3072:Vsak62MpSYSMrPzd5hlQslJqbjQsb0Y0irjq1b0tIH1QtKvTYHxD5JQrOPZxPTQR:iAF9XhHsb0Vir2YHN8rOPZeR88","tlshash":"c284f998bed2f0a647f361e4802f580be1371a6c684d9590fb96c5c56c7898f8137f2e","first_seen":"2026-06-17T13:19:31.484726Z","last_seen":"2026-07-19T15:50:12.24924Z","times_seen":15,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"gohelpdesk.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}