urlquery - report: help247.us/Bin/ScreenConnect.Client.application?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r=

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-30 04:06:17 UTC	34.102.187.140
help247.us (12)	0	2022-10-26 19:51:18 UTC	2022-11-27 21:52:12 UTC	144.126.149.235	Unknown ranking
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	54.148.77.40
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-30 04:06:04 UTC	34.117.237.239
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
r3.o.lencr.org (7)	344	No data	No data	23.33.119.27
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29

Scan Date	Severity	Indicator	Comment
2022-11-30	2	help247.us/Script.ashx?__Cache=0f332367-30b2-4dd6-a865-c6790122015a	Malware
2022-11-30	2	help247.us/Images/Extras.svg	Malware
2022-11-30	2	help247.us/Images/WaffleIcon.svg	Malware
2022-11-30	2	help247.us/Services/PageService.ashx/GetGuestSessionInfo	Malware
2022-11-30	2	help247.us/FavIcon.axd?__Cache=e5a89332-32a0-4cd9-904c-9721b7161561	Malware
2022-11-30	2	help247.us/Services/PageService.ashx/GetGuestSessionInfo	Malware
2022-11-30	2	help247.us/Services/PageService.ashx/GetGuestSessionInfo	Malware
2022-11-30	2	help247.us/Services/PageService.ashx/GetGuestSessionInfo	Malware

Date	UQ / IDS / BL	URL	IP
2022-12-17 14:22:06 +0000	0 - 0 - 10	help247.us/Bin/ScreenConnect.Client.applicati (...)	144.126.149.235
2022-12-09 07:50:12 +0000	0 - 0 - 8	help247.us/Bin/ScreenConnect.Client.applicati (...)	144.126.149.235
2022-11-30 09:25:08 +0000	0 - 0 - 8	help247.us/Bin/ScreenConnect.Client.applicati (...)	144.126.149.235
2022-11-05 10:28:59 +0000	0 - 0 - 8	help247.us/Bin/ScreenConnect.WindowsClient.exe	144.126.149.235
2022-11-05 10:28:55 +0000	0 - 0 - 9	help247.us/Bin/ScreenConnect.ClientService.dll	144.126.149.235

Date	UQ / IDS / BL	URL	IP
2023-02-05 16:19:04 +0000	31 - 0 - 0	delivery.udsbrasil.com.br/public/dMVd4G7Z855B (...)	38.105.209.111
2023-02-05 15:45:57 +0000	33 - 0 - 0	delivery.udsbrasil.com.br/public/X94xwCSb09sA (...)	38.105.209.111
2023-02-05 15:45:57 +0000	31 - 0 - 0	delivery.udsbrasil.com.br/public/WKO5dA0ns7ES (...)	38.105.209.111
2023-02-05 15:45:54 +0000	3 - 0 - 0	delivery.udsbrasil.com.br/public/HxqTD8bR5ytv (...)	38.105.209.111
2023-02-05 15:45:45 +0000	13 - 0 - 0	delivery.udsbrasil.com.br/public/iD8obkw4KSaQ (...)	38.105.209.111

Date	UQ / IDS / BL	URL	IP
2022-12-17 14:22:06 +0000	0 - 0 - 10	help247.us/Bin/ScreenConnect.Client.applicati (...)	144.126.149.235
2022-12-09 07:50:12 +0000	0 - 0 - 8	help247.us/Bin/ScreenConnect.Client.applicati (...)	144.126.149.235
2022-11-30 09:25:08 +0000	0 - 0 - 8	help247.us/Bin/ScreenConnect.Client.applicati (...)	144.126.149.235
2022-11-05 10:28:59 +0000	0 - 0 - 8	help247.us/Bin/ScreenConnect.WindowsClient.exe	144.126.149.235
2022-11-05 10:28:55 +0000	0 - 0 - 9	help247.us/Bin/ScreenConnect.ClientService.dll	144.126.149.235

Date	UQ / IDS / BL	URL	IP
2022-11-05 10:28:59 +0000	0 - 0 - 8	help247.us/Bin/ScreenConnect.WindowsClient.exe	144.126.149.235
2022-11-05 10:28:55 +0000	0 - 0 - 9	help247.us/Bin/ScreenConnect.ClientService.dll	144.126.149.235
2022-11-05 10:28:52 +0000	0 - 0 - 9	help247.us/Bin/ScreenConnect.ClientService.exe	144.126.149.235
2022-12-23 00:57:30 +0000	0 - 1 - 0	myhelp.live/Bin/ScreenConnect.Client.applicat (...)	154.53.52.72
2022-12-09 07:50:12 +0000	0 - 0 - 8	help247.us/Bin/ScreenConnect.Client.applicati (...)	144.126.149.235

Request	Response
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4981 Cache-Control: max-age=95355 Date: Wed, 30 Nov 2022 09:24:57 GMT Etag: "6385df6f-1d7" Expires: Thu, 01 Dec 2022 11:54:12 GMT Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 4ed065cb23b5fca1a179dd73b3c5b7b2 Sha1: 4422eb24688f5e056fc1b18b127c7f63b1dbf5e0 Sha256: b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Wed, 30 Nov 2022 09:18:00 GMT cache-control: public,max-age=3600 age: 417 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /Bin/ScreenConnect.Client.application?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: help247.us/Bin/ScreenConnect.Client.application?h=help2 (...) FQDN: help247.us IP: 144.126.149.235 HASH: bc72875ee995e8fbdd81457bfcbcfec7aa871a633986bf060afa0351a5ac92e5 144.126.149.235 HTTP/1.1 302 Redirect Content-Type: text/html; charset=UTF-8 Location: https://help247.us?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Server: Microsoft-IIS/10.0 Date: Wed, 30 Nov 2022 09:24:57 GMT Content-Length: 631 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (588) Size: 631 Md5: ba58bce9b6f10f2ec4c334396c83f6f2 Sha1: 5f8a0f878f569285200f78a8dfb9b7db3cbb6eda Sha256: bc72875ee995e8fbdd81457bfcbcfec7aa871a633986bf060afa0351a5ac92e5
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Wed, 30 Nov 2022 09:08:56 GMT cache-control: public,max-age=3600 age: 961 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAA (...) FQDN: help247.us IP: 144.126.149.235 HASH: 41b16bde41fe89d166eed950c4ced0a05e54492b1218ad66b3a9a9f910aa265b 144.126.149.235 HTTP/2 200 OK content-type: text/html; charset=utf-8 cache-control: private content-length: 6967 content-encoding: gzip server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 p3p: CP="NON CUR OUR STP STA PRE" date: Wed, 30 Nov 2022 09:24:57 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (524), with CRLF line terminators Size: 6967 Md5: 837a177a7361d739aa91b38210a7e8a1 Sha1: 6c217742c7bf6b82e726fc5cf31d6f5853845162 Sha256: 41b16bde41fe89d166eed950c4ced0a05e54492b1218ad66b3a9a9f910aa265b
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4980 Cache-Control: max-age=90291 Date: Wed, 30 Nov 2022 09:24:57 GMT Etag: "6385cba8-1d7" Expires: Thu, 01 Dec 2022 10:29:48 GMT Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 3c8c689bd654417640d85f3da51af313 Sha1: 85123b6d46230a23d03768bf304b386e5d301305 Sha256: 516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 2mPwvuFM7SA6kB8zl5xYwA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.148.77.40 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.148.77.40 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: Iuyaes+5XJVPN4lGkeZ3LT1MLGU= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: ZhvjMXJ/+B6BbbPYGdEND99vtH2YU+YfTURjZYeuj3Ogb3LILg20n44XLiZL6KzHjFnZyrTCmXw= x-amz-request-id: B95DPE6ZXT5D24VG content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Wed, 30 Nov 2022 08:45:10 GMT age: 2388 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Wed, 30 Nov 2022 09:24:58 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /Script.ashx?__Cache=0f332367-30b2-4dd6-a865-c6790122015a HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/Script.ashx?__Cache=0f332367-30b2-4dd6-a865- (...) FQDN: help247.us IP: 144.126.149.235 HASH: 74545a963d79b4447d83eef385f0d3c0d771168e98fed8cf0236362c413fd86b 144.126.149.235 HTTP/2 200 OK content-type: text/javascript; charset=utf-8 cache-control: public, max-age=30268237 content-length: 93610 content-encoding: gzip expires: Wed, 15 Nov 2023 17:15:35 GMT vary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 date: Wed, 30 Nov 2022 09:24:57 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (34153), with CRLF line terminators Size: 93610 Md5: 2eab2ba34fc143496a32799b5f7fe2d1 Sha1: b3ba0e51c4e051d2058385ab2c0ae7680f099747 Sha256: 74545a963d79b4447d83eef385f0d3c0d771168e98fed8cf0236362c413fd86b Alerts: Blocklists: - fortinet: Malware
GET /App_Themes/SolidWithBlue/Default.css?__Cache=e790969c-b75c-4136-95f0-9ea32c33df42 HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/App_Themes/SolidWithBlue/Default.css?__Cache (...) FQDN: help247.us IP: 144.126.149.235 HASH: 748304167cf0614e0be06f4d4232a5f973b6a470d34c505f9b9122cad14685e7 144.126.149.235 HTTP/2 200 OK content-type: text/css; charset=utf-8 cache-control: public, max-age=30268126 content-length: 106730 content-encoding: gzip expires: Wed, 15 Nov 2023 17:13:45 GMT vary: Accept-Encoding server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 date: Wed, 30 Nov 2022 09:24:57 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (27376), with CRLF line terminators Size: 106730 Md5: 981df5f4f058926cace7e704909de67a Sha1: acfc96c83b6132973b42292ae7bf4bede05cd95b Sha256: 748304167cf0614e0be06f4d4232a5f973b6a470d34c505f9b9122cad14685e7
GET /Images/Extras.svg HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/Images/Extras.svg FQDN: help247.us IP: 144.126.149.235 HASH: 8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061 144.126.149.235 HTTP/2 200 OK content-type: image/svg+xml cache-control: public content-length: 322 expires: Wed, 30 Nov 2022 22:40:46 GMT last-modified: Fri, 01 Jul 2022 22:23:14 GMT accept-ranges: bytes etag: "1D88D9927857500" server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 date: Wed, 30 Nov 2022 09:24:58 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (322), with no line terminators Size: 322 Md5: 813c72f0a4741978669871e3800d5279 Sha1: ae5e036f992577f8afca3d99a352f44a217c2c2a Sha256: 8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061 Alerts: Blocklists: - fortinet: Malware
GET /Images/WaffleIcon.svg HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/Images/WaffleIcon.svg FQDN: help247.us IP: 144.126.149.235 HASH: 5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d 144.126.149.235 HTTP/2 200 OK content-type: image/svg+xml cache-control: public content-length: 821 expires: Wed, 30 Nov 2022 22:40:46 GMT last-modified: Fri, 01 Jul 2022 22:23:14 GMT accept-ranges: bytes etag: "1D88D9927857500" server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 date: Wed, 30 Nov 2022 09:24:58 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (821), with no line terminators Size: 821 Md5: 2599340bf60ee89b13e6b91beefe1199 Sha1: 4e0babcd7fdcabc1759ed0f130e06972340c5127 Sha256: 5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d Alerts: Blocklists: - fortinet: Malware
POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json X-Anti-Forgery-Token: /er4ibtOeArOvjph4dz33813IFymImjsziMoGtg2lWcBAACHvtMwMrYtQg== X-Unauthorized-Status-Code: 403 Content-Length: 9 Origin: https://help247.us Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/Services/PageService.ashx/GetGuestSessionInfo FQDN: help247.us IP: 144.126.149.235 HASH: 9af291866f6e9c635525e977798a191bbbfa276412d409b24341288e7a00fd83 144.126.149.235 HTTP/2 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store pragma: no-cache content-length: 105 expires: -1 server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 access-control-allow-origin: https://help247.us access-control-allow-credentials: true date: Wed, 30 Nov 2022 09:24:58 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 105 Md5: b7195c266c8fcd8a07476206d1de60cb Sha1: 78b799db6a41dbdc47e4c8d85d610bc1848a25ad Sha256: 9af291866f6e9c635525e977798a191bbbfa276412d409b24341288e7a00fd83 Alerts: Blocklists: - fortinet: Malware
GET /Images/ActivityIndicator.gif HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://help247.us/App_Themes/SolidWithBlue/Default.css?__Cache=e790969c-b75c-4136-95f0-9ea32c33df42 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/Images/ActivityIndicator.gif FQDN: help247.us IP: 144.126.149.235 HASH: 9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a 144.126.149.235 HTTP/2 200 OK content-type: image/gif cache-control: public content-length: 27503 expires: Wed, 30 Nov 2022 22:40:46 GMT last-modified: Fri, 01 Jul 2022 22:23:14 GMT accept-ranges: bytes etag: "1D88D9927857500" server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 date: Wed, 30 Nov 2022 09:24:58 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 200 x 200\012- data Size: 27503 Md5: c63792b958d231654ab54542fea871db Sha1: c21cfffa5cbd2a7c94076324fe28c4596df92e0c Sha256: 9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a
GET /FavIcon.axd?__Cache=e5a89332-32a0-4cd9-904c-9721b7161561 HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/FavIcon.axd?__Cache=e5a89332-32a0-4cd9-904c- (...) FQDN: help247.us IP: 144.126.149.235 HASH: 2206a9c2bb7c1863d52caacd4d3926b48a9f21127901747953d05b1c447b24ae 144.126.149.235 HTTP/2 200 OK content-type: image/vnd.microsoft.icon cache-control: public, max-age=30268128 content-length: 38 expires: Wed, 15 Nov 2023 17:13:47 GMT vary: Accept-Encoding server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 date: Wed, 30 Nov 2022 09:24:58 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 38 Md5: a3ddc69ead48d5e01cf0141dd3e20abe Sha1: 9a7a966e9735e9611fadbb9f7b14355769143663 Sha256: 2206a9c2bb7c1863d52caacd4d3926b48a9f21127901747953d05b1c447b24ae Alerts: Blocklists: - fortinet: Malware
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9051 x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cYhGvEMNIAMFaKw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: rtfl896JX35oFFEVmqyH9Nm62iSY6rqwzkLwZMcM45p_ySF6J2QwEQ== via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 21:44:47 GMT age: 42013 etag: "6170d6776615503e3e29f86783febc3e3e78ca66" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9051 Md5: 05196ec43964cf559caa0c0279148d62 Sha1: 6170d6776615503e3e29f86783febc3e3e78ca66 Sha256: 47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4803 x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iFHoIAMF2-g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: CJiSRzIK7-rQE81gaP2We0LhgKX1YmuJKEGYEqW34Bm1KMx6NB8yhQ== via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 23:32:45 GMT age: 35535 etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4803 Md5: cc0a257323f882caff067adb86d906e4 Sha1: cedf2f21be7cd366bd46055b62b5513db3011dfc Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ce41ff79c382efc54aa2fd3ab64293d2d2b706a7f21585f4bd8bbcd9a3566126 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7971 x-amzn-requestid: e47d10e4-2b60-4998-b5fa-5b145e60aac2 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cYhgWHgGoAMFcLA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63867c68-5b9710a07b0a59730e73dce4;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: OURSF_raDXrHV3-3ScaEdorNpW9ZKSIQjv6WUCQYHhruGz372BU_QA== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 22:11:32 GMT age: 40408 etag: "87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7971 Md5: 9e135c29a8769eb12ef8c26f99097400 Sha1: 87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d Sha256: ce41ff79c382efc54aa2fd3ab64293d2d2b706a7f21585f4bd8bbcd9a3566126
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e0ecbb6052b4fef75f58da8dae589c81ab9ec9d304de08f26c144a2c3ce9eaac 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3719 x-amzn-requestid: 6fab3454-fedd-4a1e-ae47-468ddd6233bc x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cYgDaGQ4IAMFUkQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63867a15-4b313cf054d6301e71cdc0c1;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: KpgPP5VdjjU4rHaunbn3Yf-F5vLzZC7PhWu_QCF4WfuDHTqw3ufoyw== via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 21:44:35 GMT etag: "453067f6ab356aa87a3ad3b56e33545376597852" age: 42025 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3719 Md5: ceb8e975fb408de32c43f55febaa6414 Sha1: 453067f6ab356aa87a3ad3b56e33545376597852 Sha256: e0ecbb6052b4fef75f58da8dae589c81ab9ec9d304de08f26c144a2c3ce9eaac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9674 x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cYgEoHVAoAMFvAQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 21:44:46 GMT etag: "53650399f9a986ba54addd668b4557109d12003b" age: 42014 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9674 Md5: 5508d05a290b663fd89ead9b58f2efd8 Sha1: 53650399f9a986ba54addd668b4557109d12003b Sha256: 65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29e8368b-e5a8-4256-a456-b724e13819e4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 341fd33d3d9486079c182d60e21c355244b6597e6e09ba51ecee2e331b38ca2e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10068 x-amzn-requestid: 7f386e94-3c17-44a1-a36b-3d0eeff4623d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cYhGvEQQoAMFihA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63867bc4-5069acfd038ffb2c124b7bd8;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Ec2HkhHmHE2ddGBpLsJ5Rn7SCMjyR5kzaTyrguDoI9xOohgsCi08CQ== via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 21:44:26 GMT age: 42034 etag: "639165dc66d171b8266f22cd495181427112bc80" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10068 Md5: f621857774e4b4adda95f58081644859 Sha1: 639165dc66d171b8266f22cd495181427112bc80 Sha256: 341fd33d3d9486079c182d60e21c355244b6597e6e09ba51ecee2e331b38ca2e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13076 Expires: Wed, 30 Nov 2022 13:02:58 GMT Date: Wed, 30 Nov 2022 09:25:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5991 Expires: Wed, 30 Nov 2022 11:04:53 GMT Date: Wed, 30 Nov 2022 09:25:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a5daf4dc99951793ae2315d4795e8146 Sha1: 4427507ca4d3a5632cc8f598afbc85e2195d00bd Sha256: 94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18810 Expires: Wed, 30 Nov 2022 14:38:32 GMT Date: Wed, 30 Nov 2022 09:25:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6d9d34c96b9a826ae5676640c966469c Sha1: 8052a16d41a637e420478b7de1ff5a2dc951fccd Sha256: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13076 Expires: Wed, 30 Nov 2022 13:02:58 GMT Date: Wed, 30 Nov 2022 09:25:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13076 Expires: Wed, 30 Nov 2022 13:02:58 GMT Date: Wed, 30 Nov 2022 09:25:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13076 Expires: Wed, 30 Nov 2022 13:02:58 GMT Date: Wed, 30 Nov 2022 09:25:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13076 Expires: Wed, 30 Nov 2022 13:02:58 GMT Date: Wed, 30 Nov 2022 09:25:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json X-Anti-Forgery-Token: /er4ibtOeArOvjph4dz33813IFymImjsziMoGtg2lWcBAACHvtMwMrYtQg== X-Unauthorized-Status-Code: 403 Content-Length: 17 Origin: https://help247.us Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/Services/PageService.ashx/GetGuestSessionInfo FQDN: help247.us IP: 144.126.149.235 HASH: 0952f4eb9184c8ff8d898375781dcb71f09234c27bcbe6efaa4faf6617260e6e 144.126.149.235 HTTP/2 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store pragma: no-cache content-length: 105 expires: -1 server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 access-control-allow-origin: https://help247.us access-control-allow-credentials: true date: Wed, 30 Nov 2022 09:25:03 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 105 Md5: be9744b9d4141422a247f16222ebf790 Sha1: bd2697bb3bd8a4921468dd74d8927dfe55baebf0 Sha256: 0952f4eb9184c8ff8d898375781dcb71f09234c27bcbe6efaa4faf6617260e6e Alerts: Blocklists: - fortinet: Malware
POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json X-Anti-Forgery-Token: /er4ibtOeArOvjph4dz33813IFymImjsziMoGtg2lWcBAACHvtMwMrYtQg== X-Unauthorized-Status-Code: 403 Content-Length: 17 Origin: https://help247.us Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/Services/PageService.ashx/GetGuestSessionInfo FQDN: help247.us IP: 144.126.149.235 HASH: 5d18147ea7dd149f740a611e95c0c1eed68e3745f9c1376c7f84cb704681e5bd 144.126.149.235 HTTP/2 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store pragma: no-cache content-length: 105 expires: -1 server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 access-control-allow-origin: https://help247.us access-control-allow-credentials: true date: Wed, 30 Nov 2022 09:25:04 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 105 Md5: b8902cdaec919d071e98d3220533598a Sha1: dbf2029b14d21bb6cd7b4bd447535be77374c99b Sha256: 5d18147ea7dd149f740a611e95c0c1eed68e3745f9c1376c7f84cb704681e5bd Alerts: Blocklists: - fortinet: Malware
POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1 Host: help247.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json X-Anti-Forgery-Token: /er4ibtOeArOvjph4dz33813IFymImjsziMoGtg2lWcBAACHvtMwMrYtQg== X-Unauthorized-Status-Code: 403 Content-Length: 17 Origin: https://help247.us Connection: keep-alive Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers	URL: help247.us/Services/PageService.ashx/GetGuestSessionInfo FQDN: help247.us IP: 144.126.149.235 HASH: 02116d086101d657f08927664dce2487856f2787b0faee1a82326d0be84bb881 144.126.149.235 HTTP/2 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store pragma: no-cache content-length: 105 expires: -1 server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 access-control-allow-origin: https://help247.us access-control-allow-credentials: true date: Wed, 30 Nov 2022 09:25:05 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 105 Md5: 4ef79ce2cf7245ba04fa4c4c3bcffdc1 Sha1: 8d816d01da7d877c1a45a1af0cd5f9d98ad4be5b Sha256: 02116d086101d657f08927664dce2487856f2787b0faee1a82326d0be84bb881 Alerts: Blocklists: - fortinet: Malware

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 4981 

                                        
                                            
Cache-Control: max-age=95355 

                                        
                                            
Date: Wed, 30 Nov 2022 09:24:57 GMT 

                                        
                                            
Etag: "6385df6f-1d7" 

                                        
                                            
Expires: Thu, 01 Dec 2022 11:54:12 GMT 

                                        
                                            
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT 

                                        
                                            
Server: ECS (ska/F71A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    4ed065cb23b5fca1a179dd73b3c5b7b2

                                                Sha1:   4422eb24688f5e056fc1b18b127c7f63b1dbf5e0

                                                Sha256: b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35

                                        
                                            GET /Bin/ScreenConnect.Client.application?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= HTTP/1.1 

                                        
                                            
Host: help247.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         144.126.149.235

                                        
                                            HTTP/1.1 302 Redirect 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Location: https://help247.us?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= 

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
Date: Wed, 30 Nov 2022 09:24:57 GMT 

                                        
                                            
Content-Length: 631 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (588)

                                                Size:   631

                                                Md5:    ba58bce9b6f10f2ec4c334396c83f6f2

                                                Sha1:   5f8a0f878f569285200f78a8dfb9b7db3cbb6eda

                                                Sha256: bc72875ee995e8fbdd81457bfcbcfec7aa871a633986bf060afa0351a5ac92e5

                                        
                                            GET /?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= HTTP/1.1 

                                        
                                            
Host: help247.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         144.126.149.235

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
cache-control: private 

                                        
                                            
content-length: 6967 

                                        
                                            
content-encoding: gzip 

                                        
                                            
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 

                                        
                                            
p3p: CP="NON CUR OUR STP STA PRE" 

                                        
                                            
date: Wed, 30 Nov 2022 09:24:57 GMT 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (524), with CRLF line terminators

                                                Size:   6967

                                                Md5:    837a177a7361d739aa91b38210a7e8a1

                                                Sha1:   6c217742c7bf6b82e726fc5cf31d6f5853845162

                                                Sha256: 41b16bde41fe89d166eed950c4ced0a05e54492b1218ad66b3a9a9f910aa265b

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: 2mPwvuFM7SA6kB8zl5xYwA== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         54.148.77.40

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: Iuyaes+5XJVPN4lGkeZ3LT1MLGU= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 30 Nov 2022 09:24:58 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /App_Themes/SolidWithBlue/Default.css?__Cache=e790969c-b75c-4136-95f0-9ea32c33df42 HTTP/1.1 

                                        
                                            
Host: help247.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r= 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         144.126.149.235

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css; charset=utf-8

                                        

                                        
                                            
cache-control: public, max-age=30268126 

                                        
                                            
content-length: 106730 

                                        
                                            
content-encoding: gzip 

                                        
                                            
expires: Wed, 15 Nov 2023 17:13:45 GMT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 

                                        
                                            
date: Wed, 30 Nov 2022 09:24:57 GMT 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (27376), with CRLF line terminators

                                                Size:   106730

                                                Md5:    981df5f4f058926cace7e704909de67a

                                                Sha1:   acfc96c83b6132973b42292ae7bf4bede05cd95b

                                                Sha256: 748304167cf0614e0be06f4d4232a5f973b6a470d34c505f9b9122cad14685e7

                                        
                                            GET /Images/ActivityIndicator.gif HTTP/1.1 

                                        
                                            
Host: help247.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://help247.us/App_Themes/SolidWithBlue/Default.css?__Cache=e790969c-b75c-4136-95f0-9ea32c33df42 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         144.126.149.235

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
cache-control: public 

                                        
                                            
content-length: 27503 

                                        
                                            
expires: Wed, 30 Nov 2022 22:40:46 GMT 

                                        
                                            
last-modified: Fri, 01 Jul 2022 22:23:14 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
etag: "1D88D9927857500" 

                                        
                                            
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0 

                                        
                                            
date: Wed, 30 Nov 2022 09:24:58 GMT 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 200 x 200\012- data

                                                Size:   27503

                                                Md5:    c63792b958d231654ab54542fea871db

                                                Sha1:   c21cfffa5cbd2a7c94076324fe28c4596df92e0c

                                                Sha256: 9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9051 

                                        
                                            
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cYhGvEMNIAMFaKw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: rtfl896JX35oFFEVmqyH9Nm62iSY6rqwzkLwZMcM45p_ySF6J2QwEQ== 

                                        
                                            
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 29 Nov 2022 21:44:47 GMT 

                                        
                                            
age: 42013 

                                        
                                            
etag: "6170d6776615503e3e29f86783febc3e3e78ca66" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9051

                                                Md5:    05196ec43964cf559caa0c0279148d62

                                                Sha1:   6170d6776615503e3e29f86783febc3e3e78ca66

                                                Sha256: 47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7971 

                                        
                                            
x-amzn-requestid: e47d10e4-2b60-4998-b5fa-5b145e60aac2 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cYhgWHgGoAMFcLA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63867c68-5b9710a07b0a59730e73dce4;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: OURSF_raDXrHV3-3ScaEdorNpW9ZKSIQjv6WUCQYHhruGz372BU_QA== 

                                        
                                            
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 29 Nov 2022 22:11:32 GMT 

                                        
                                            
age: 40408 

                                        
                                            
etag: "87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7971

                                                Md5:    9e135c29a8769eb12ef8c26f99097400

                                                Sha1:   87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d

                                                Sha256: ce41ff79c382efc54aa2fd3ab64293d2d2b706a7f21585f4bd8bbcd9a3566126

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9674 

                                        
                                            
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cYgEoHVAoAMFvAQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A== 

                                        
                                            
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 29 Nov 2022 21:44:46 GMT 

                                        
                                            
etag: "53650399f9a986ba54addd668b4557109d12003b" 

                                        
                                            
age: 42014 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9674

                                                Md5:    5508d05a290b663fd89ead9b58f2efd8

                                                Sha1:   53650399f9a986ba54addd668b4557109d12003b

                                                Sha256: 65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13076 

                                        
                                            
Expires: Wed, 30 Nov 2022 13:02:58 GMT 

                                        
                                            
Date: Wed, 30 Nov 2022 09:25:02 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a97c452e75cf1d4833e777d7ba7f2c47

                                                Sha1:   58f15763fd33f742ce870f49f1c2dbed5b41205f

                                                Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=18810 

                                        
                                            
Expires: Wed, 30 Nov 2022 14:38:32 GMT 

                                        
                                            
Date: Wed, 30 Nov 2022 09:25:02 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    6d9d34c96b9a826ae5676640c966469c

                                                Sha1:   8052a16d41a637e420478b7de1ff5a2dc951fccd

                                                Sha256: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13076 

                                        
                                            
Expires: Wed, 30 Nov 2022 13:02:58 GMT 

                                        
                                            
Date: Wed, 30 Nov 2022 09:25:02 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a97c452e75cf1d4833e777d7ba7f2c47

                                                Sha1:   58f15763fd33f742ce870f49f1c2dbed5b41205f

                                                Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13076 

                                        
                                            
Expires: Wed, 30 Nov 2022 13:02:58 GMT 

                                        
                                            
Date: Wed, 30 Nov 2022 09:25:02 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a97c452e75cf1d4833e777d7ba7f2c47

                                                Sha1:   58f15763fd33f742ce870f49f1c2dbed5b41205f

                                                Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

URL	help247.us/Bin/ScreenConnect.Client.application?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=95a1ad19-37b9-4d48-94f7-cb6f1c1c2775&i=IRFAN786&e=Support&y=Guest&r=
IP	144.126.149.235 (United States)
ASN	#40021 CONTABO
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-30 09:25:08 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	8
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (8)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 144.126.149.235

Last 5 reports on ASN: CONTABO

Last 5 reports on domain: help247.us

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (8)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (32)

Overview

Domain Summary (8)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 144.126.149.235

Last 5 reports on ASN: CONTABO

Last 5 reports on domain: help247.us

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (8)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (32)

Network Intrusion Detection Systems