help247.us/Bin/ScreenConnect.Client.application?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
302 Redirect 641 B URL HTTP/1.1 help247.us/Bin/ScreenConnect.Client.application?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (598)
Hash 6cfe498e86bda9c7ae4480a1a387f159
3d471dcbb8638c5ac2dcfe29eaa6d65e5c519e9a
99a571405fdd08414618eaa04c7d74247d4c20fae3ae59d15026d51582203a17
GET /Bin/ScreenConnect.Client.application?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r= HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://help247.us?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Server: Microsoft-IIS/10.0
Date: Fri, 09 Dec 2022 07:50:00 GMT
Content-Length: 641
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10541
Expires: Fri, 09 Dec 2022 10:45:41 GMT
Date: Fri, 09 Dec 2022 07:50:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19752
Expires: Fri, 09 Dec 2022 13:19:12 GMT
Date: Fri, 09 Dec 2022 07:50:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 07:08:17 GMT
content-type: application/json
age: 2503
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10107
Expires: Fri, 09 Dec 2022 10:38:27 GMT
Date: Fri, 09 Dec 2022 07:50:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aM91F1m/lf2DcabT5CnJ4l+LuZhoZk1iBco+NBM8L+8Sh+PrmgZBmwBtV/C6BIlpWj+GKXvdjew=
x-amz-request-id: B9C2S1DFG1778639
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 06:50:09 GMT
age: 3591
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 07:50:00 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
200 OK 7.0 kB URL HTTP/2 help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (524), with CRLF line terminators
Hash 31f10ebc879047fd0a5f4327e22e338d
2c74b4d56df56ae0e7bde0f0ff9fbeac00d89152
fda904cae4285e7e9a49658abf1c23432c8b39a2dad6ffaefe91bd1b393c93e6
GET /?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r= HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: private
content-length: 6972
content-type: text/html; charset=utf-8
content-encoding: gzip
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
p3p: CP="NON CUR OUR STP STA PRE"
date: Fri, 09 Dec 2022 07:50:00 GMT
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 07:07:55 GMT
age: 2526
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4658
Cache-Control: max-age=95669
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 07:50:01 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:24:30 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
help247.us/Script.ashx?__Cache=6d790f38-2d08-429d-8acc-e1e677ab65d9
200 OK 94 kB URL HTTP/2 help247.us/Script.ashx?__Cache=6d790f38-2d08-429d-8acc-e1e677ab65d9
IP
File type ASCII text, with very long lines (34153), with CRLF line terminators
Hash 2eab2ba34fc143496a32799b5f7fe2d1
b3ba0e51c4e051d2058385ab2c0ae7680f099747
74545a963d79b4447d83eef385f0d3c0d771168e98fed8cf0236362c413fd86b
Analyzer Verdict Alert fortinet Malware
GET /Script.ashx?__Cache=6d790f38-2d08-429d-8acc-e1e677ab65d9 HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31535979
content-length: 93610
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Sat, 09 Dec 2023 07:49:41 GMT
vary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
date: Fri, 09 Dec 2022 07:50:00 GMT
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qHIotbXLFjbTqAKvf/ZP3g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hr5Kv8x49oVS1acrXzMSJFKuSJo=
help247.us/App_Themes/SolidWithBlue/Default.css?__Cache=a8177563-2467-4060-a598-7946eb129e37
200 OK 107 kB URL HTTP/2 help247.us/App_Themes/SolidWithBlue/Default.css?__Cache=a8177563-2467-4060-a598-7946eb129e37
IP
File type ASCII text, with very long lines (27376), with CRLF line terminators
Size 107 kB (106730 bytes)
Hash 981df5f4f058926cace7e704909de67a
acfc96c83b6132973b42292ae7bf4bede05cd95b
748304167cf0614e0be06f4d4232a5f973b6a470d34c505f9b9122cad14685e7
GET /App_Themes/SolidWithBlue/Default.css?__Cache=a8177563-2467-4060-a598-7946eb129e37 HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31515260
content-length: 106730
content-type: text/css; charset=utf-8
content-encoding: gzip
expires: Sat, 09 Dec 2023 02:04:21 GMT
vary: Accept-Encoding
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
date: Fri, 09 Dec 2022 07:50:00 GMT
X-Firefox-Spdy: h2
help247.us/Images/WaffleIcon.svg
200 OK 821 B URL HTTP/2 help247.us/Images/WaffleIcon.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (821), with no line terminators
Hash 2599340bf60ee89b13e6b91beefe1199
4e0babcd7fdcabc1759ed0f130e06972340c5127
5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d
Analyzer Verdict Alert fortinet Malware
GET /Images/WaffleIcon.svg HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-length: 821
content-type: image/svg+xml
expires: Sat, 10 Dec 2022 03:56:38 GMT
last-modified: Fri, 01 Jul 2022 22:23:14 GMT
accept-ranges: bytes
etag: "1D88D9927857500"
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
date: Fri, 09 Dec 2022 07:50:01 GMT
X-Firefox-Spdy: h2
help247.us/Services/PageService.ashx/GetGuestSessionInfo
200 OK 105 B URL HTTP/2 help247.us/Services/PageService.ashx/GetGuestSessionInfo
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e443aeeb566229c11ce4fc39dbf5bf21
3176f09c076f6289ed16dd77d89298a39caea59c
cb81ffbaa7f063b3292397bfa4345d0263c09f8bdb69bb8dd850f6c55653984a
Analyzer Verdict Alert fortinet Malware
POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: VaRmpIZyvqYgWqjE+Q6Y9mBoybbjgQFQIjcIWn7B0gUBAADT6FG/SbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 9
Origin: https://help247.us
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://help247.us
access-control-allow-credentials: true
date: Fri, 09 Dec 2022 07:50:01 GMT
X-Firefox-Spdy: h2
help247.us/Images/Extras.svg
200 OK 322 B URL HTTP/2 help247.us/Images/Extras.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (322), with no line terminators
Hash 813c72f0a4741978669871e3800d5279
ae5e036f992577f8afca3d99a352f44a217c2c2a
8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061
Analyzer Verdict Alert fortinet Malware
GET /Images/Extras.svg HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-length: 322
content-type: image/svg+xml
expires: Sat, 10 Dec 2022 03:56:38 GMT
last-modified: Fri, 01 Jul 2022 22:23:14 GMT
accept-ranges: bytes
etag: "1D88D9927857500"
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
date: Fri, 09 Dec 2022 07:50:01 GMT
X-Firefox-Spdy: h2
help247.us/Images/ActivityIndicator.gif
200 OK 28 kB URL HTTP/2 help247.us/Images/ActivityIndicator.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Hash c63792b958d231654ab54542fea871db
c21cfffa5cbd2a7c94076324fe28c4596df92e0c
9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a
GET /Images/ActivityIndicator.gif HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://help247.us/App_Themes/SolidWithBlue/Default.css?__Cache=a8177563-2467-4060-a598-7946eb129e37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-length: 27503
content-type: image/gif
expires: Sat, 10 Dec 2022 03:56:38 GMT
last-modified: Fri, 01 Jul 2022 22:23:14 GMT
accept-ranges: bytes
etag: "1D88D9927857500"
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
date: Fri, 09 Dec 2022 07:50:01 GMT
X-Firefox-Spdy: h2
help247.us/FavIcon.axd?__Cache=73f9e3d2-b35f-4ff5-a2d8-fde36744b806
200 OK 38 B URL HTTP/2 help247.us/FavIcon.axd?__Cache=73f9e3d2-b35f-4ff5-a2d8-fde36744b806
IP
Hash a3ddc69ead48d5e01cf0141dd3e20abe
9a7a966e9735e9611fadbb9f7b14355769143663
2206a9c2bb7c1863d52caacd4d3926b48a9f21127901747953d05b1c447b24ae
Analyzer Verdict Alert fortinet Malware
GET /FavIcon.axd?__Cache=73f9e3d2-b35f-4ff5-a2d8-fde36744b806 HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31515308
content-length: 38
content-type: image/vnd.microsoft.icon
expires: Sat, 09 Dec 2023 02:05:10 GMT
vary: Accept-Encoding
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
date: Fri, 09 Dec 2022 07:50:01 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14181
Expires: Fri, 09 Dec 2022 11:46:23 GMT
Date: Fri, 09 Dec 2022 07:50:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14181
Expires: Fri, 09 Dec 2022 11:46:23 GMT
Date: Fri, 09 Dec 2022 07:50:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14181
Expires: Fri, 09 Dec 2022 11:46:23 GMT
Date: Fri, 09 Dec 2022 07:50:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14181
Expires: Fri, 09 Dec 2022 11:46:23 GMT
Date: Fri, 09 Dec 2022 07:50:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14181
Expires: Fri, 09 Dec 2022 11:46:23 GMT
Date: Fri, 09 Dec 2022 07:50:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f3c5738-c186-4a1f-a431-33143797bcd5.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f3c5738-c186-4a1f-a431-33143797bcd5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 659b6eb1f1c430e2780758c7787b9a23
4792b0893827924e84cc51450012407717da4d2b
f14393b6bcc036fa9ed61114944ebb25192adfec72c09807eb7948a88c790d69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f3c5738-c186-4a1f-a431-33143797bcd5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8345
x-amzn-requestid: b1cf2094-2cf5-4e19-9ed7-4d7e220c93cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czUoREPoIAMF4hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391349b-1b78fe0a155179643ae2aeed;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 00:49:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: YMFI6I2o0A4rGZTluooPsDLGNRRY9kSAfDAFrwzXhIG4HC_W-hFIoQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 11:31:33 GMT
age: 73109
etag: "4792b0893827924e84cc51450012407717da4d2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a22fc7807fb3337f0af5e546c7ad366a
0d5969394b370a5c77c53ed58f55e5f8a45da3ab
98b4f4fd27dc036697fb0328083bce6e691b7493428f3a54991087d9d1165d97
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5530
x-amzn-requestid: adecbb8c-cec3-46a0-b32c-0026b8421fe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4d8Fg6IAMF61g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903abf-4bcb385f27cb438c36a2cd5e;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHRqiTOztNQMPykKUfiEUFYVlLF4E4y9GVCT2g48MAvOyG-KZQkb8Q==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 07:58:06 GMT
age: 85916
etag: "0d5969394b370a5c77c53ed58f55e5f8a45da3ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 730ba1a8edb79ba6f83b46d1ba5aed7b
55a236fedf6f5f7ca2bb88ae13e20846a50fd36d
f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 18:34:32 GMT
age: 47730
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fba9a3854df65740512f96efe7442e58
8fbff7725c842d70e047c635a725723a9dc9c55a
6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dGxzuQ6zj6wXQbkBuKBnOKxwKJDHUyGoi7PgcugcpdX4QYruNiFxsQ==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:51:24 GMT
age: 35918
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf0d40ad-816d-4ea8-aef7-00a5af1b8c9b.png
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf0d40ad-816d-4ea8-aef7-00a5af1b8c9b.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 34a9b9b25e57f612db5560cd05e44cce
433e295328d6c821a1df907c232bff4195e2860b
139dc677e5725c98a5d90d19b206a34a4c9f43ad87cf1d322881381e992bd5b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf0d40ad-816d-4ea8-aef7-00a5af1b8c9b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4840
x-amzn-requestid: 26914070-22ad-49fd-bacb-7842dcb203b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c2LZPGd-oAMF5OA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63925907-5c62555a65327ff934ae232e;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 21:37:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gkClPXMpz53Lmf56qAHXyd3IcOjTGjcBonaTpq2_4v7XRxPFv8q8QA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:49:12 GMT
age: 36050
etag: "433e295328d6c821a1df907c232bff4195e2860b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c3214044657f3b876d1f1848bca5684
7558222788f06623ddae6e883413e38e1146281e
e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oV7bB5Tek01MFi9x2tr_Wix13-UGlQPIt042XM0ALNUvVFYnu5DRcg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:38:26 GMT
age: 15096
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
help247.us/Services/PageService.ashx/GetGuestSessionInfo
200 OK 105 B URL HTTP/2 help247.us/Services/PageService.ashx/GetGuestSessionInfo
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0a6c7dc5afda225a52cc03dab37a9391
e1917e9221a98c09ba70158b4ad0b626a165da2a
593a967c219556fd680a49b66997f7f24700a5bae386c7596c96afb206617f26
Analyzer Verdict Alert fortinet Malware
POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: VaRmpIZyvqYgWqjE+Q6Y9mBoybbjgQFQIjcIWn7B0gUBAADT6FG/SbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 17
Origin: https://help247.us
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://help247.us
access-control-allow-credentials: true
date: Fri, 09 Dec 2022 07:50:06 GMT
X-Firefox-Spdy: h2
help247.us/Services/PageService.ashx/GetGuestSessionInfo
200 OK 105 B URL HTTP/2 help247.us/Services/PageService.ashx/GetGuestSessionInfo
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0661c54b7afe69b030edbdf3b86cf02f
6ff0eddad18273b6ab20a71e7f7f0d6c7c9bacbf
388ed908057516f98bc8d6bf6fe920e8b590f311d691c11673b56a7fccbfaa20
Analyzer Verdict Alert fortinet Malware
POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: VaRmpIZyvqYgWqjE+Q6Y9mBoybbjgQFQIjcIWn7B0gUBAADT6FG/SbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 17
Origin: https://help247.us
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://help247.us
access-control-allow-credentials: true
date: Fri, 09 Dec 2022 07:50:07 GMT
X-Firefox-Spdy: h2
help247.us/Services/PageService.ashx/GetGuestSessionInfo
200 OK 105 B URL HTTP/2 help247.us/Services/PageService.ashx/GetGuestSessionInfo
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 08f2db763bf522b4295a869b42568156
34a76a54ff68e0d19d56ea36bb5ea9136c497614
9ab0deffd3d629d62f757e841f092a9d694be928d496a4d2a3d712667cf07230
Analyzer Verdict Alert fortinet Malware
POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: help247.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: VaRmpIZyvqYgWqjE+Q6Y9mBoybbjgQFQIjcIWn7B0gUBAADT6FG/SbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 17
Origin: https://help247.us
Connection: keep-alive
Referer: https://help247.us/?h=help247.us&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=38d50e61-4ddd-4c62-9af4-c198a5cc972e&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-1774060022 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://help247.us
access-control-allow-credentials: true
date: Fri, 09 Dec 2022 07:50:08 GMT
X-Firefox-Spdy: h2
144.126.149.235
93.184.220.29
23.36.76.226