Returning 10 result(s) out of 17,822 in 0.104 second(s)

  • 177.184.215.97:6984 (tcp/http) - last seen on 2024-11-07 at 03:04:44 UTC

    • IP
      177.184.215.97
      Network
      177.184.212.0/22
      Domain(s)
      net.br
      Device

      <enterprise field>: device.class

      URL

      http://177.184.215.97:6984/ 301

      Reverse DNS
      dynamic-177-184-215-97.netdrp.net.br
      ASN
      AS263112
      Organization
      NETDRP SERVICOS DE INTERNET LTDA.
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      Proxmox Virtual Environment 3.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c5f748f5e666fa62305542814d120922
      HTTP Header MD5
      de2c54cdd1e009b0f283ed93c4545e2b
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 301 Moved Permanently
      Cache-Control: max-age=0
      Connection: close
      Date: Thu, 07 Nov 2024 03:04:40 GMT
      Pragma: no-cache
      Location: https://<ip>:6984/
      Server: pve-api-daemon/3.0
      Expires: Thu, 07 Nov 2024 03:04:40 GMT
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:04:44.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "de2c54cdd1e009b0f283ed93c4545e2b",
               "headermmh3" : -1443023179
            },
            "length" : 232
         },
         "asn" : "AS263112",
         "city" : "Espera Feliz",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 301 Moved Permanently\r\nCache-Control: max-age=0\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 03:04:40 GMT\r\nPragma: no-cache\r\nLocation: https://<ip>:6984/\r\nServer: pve-api-daemon/3.0\r\nExpires: Thu, 07 Nov 2024 03:04:40 GMT\r\n\r\n",
         "datamd5" : "c5f748f5e666fa62305542814d120922",
         "datammh3" : 246559223,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "net.br"
         ],
         "forward" : "177.184.215.97",
         "geolocus" : {
            "asn" : "AS263112",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "net.br",
               "netdrp.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "09.302.311/0001-80",
            "organization" : "NETDRP SERVICOS DE INTERNET LTDA.",
            "subnet" : "177.184.212.0/22"
         },
         "host" : [
            "dynamic-177-184-215-97"
         ],
         "hostname" : [
            "177.184.215.97",
            "dynamic-177-184-215-97.netdrp.net.br"
         ],
         "ip" : "177.184.215.97",
         "ipv6" : "false",
         "latitude" : "-20.5911",
         "location" : "-20.5911,-41.9207",
         "longitude" : "-41.9207",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "NETDRP SERVICOS DE INTERNET LTDA.",
         "port" : 6984,
         "product" : "Virtual Environment",
         "productvendor" : "Proxmox",
         "productversion" : "3.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Permanently",
         "reverse" : [
            "dynamic-177-184-215-97.netdrp.net.br"
         ],
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 301,
         "subdomains" : [
            "netdrp.net.br"
         ],
         "subnet" : "177.184.212.0/22",
         "tld" : [
            "br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 70.116.227.97:6984 (tcp/http) - last seen on 2024-11-07 at 03:04:44 UTC

    • IP
      70.116.227.97
      Network
      70.112.0.0/13
      Domain(s)
      spectrum.com
      Device

      <enterprise field>: device.class

      URL

      http://70.116.227.97:6984/ 301

      HTTP Title
      Moved Permanently
      Reverse DNS
      syn-070-116-227-097.biz.spectrum.com
      ASN
      AS11427
      Organization
      TWC-11427-TEXAS
      Protocol
      http
      Source
      urlscan::redirect
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bed029d9b3ff6aa755f772e0ef708ce8
      HTTP Header MD5
      2c561ce2561b7f6113f96cf56b362b57
      HTTP Body MD5
      6d74b20c6fa245a96aa940816c13f6ff
    • HTTP/1.1 301 Moved Permanently
      Access-Control-Allow-Origin: *
      Content-Length: 98
      Content-Type: text/html; charset=utf-8
      Date: Thu, 07 Nov 2024 03:04:42 GMT
      Location: https://<ip>:6984/
      
      <HTML><HEAD><TITLE>Moved Permanently</TITLE></HEAD><BODY><H1>301 Moved Permanently -- </H1></BODY>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:04:44.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "6d74b20c6fa245a96aa940816c13f6ff",
               "bodymmh3" : -2097937471,
               "headermd5" : "2c561ce2561b7f6113f96cf56b362b57",
               "headermmh3" : 1660965139,
               "title" : "Moved Permanently"
            },
            "length" : 291
         },
         "asn" : "AS11427",
         "city" : "San Antonio",
         "country" : "US",
         "data" : "HTTP/1.1 301 Moved Permanently\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 98\r\nContent-Type: text/html; charset=utf-8\r\nDate: Thu, 07 Nov 2024 03:04:42 GMT\r\nLocation: https://<ip>:6984/\r\n\r\n<HTML><HEAD><TITLE>Moved Permanently</TITLE></HEAD><BODY><H1>301 Moved Permanently -- </H1></BODY>",
         "datamd5" : "bed029d9b3ff6aa755f772e0ef708ce8",
         "datammh3" : 1422661398,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "spectrum.com"
         ],
         "forward" : "70.116.227.97",
         "geolocus" : {
            "asn" : "AS11427",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "charter.com",
               "charter.net",
               "spectrum.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "RRSW",
            "organization" : "Charter Communications Inc",
            "subnet" : "70.112.0.0/13"
         },
         "host" : [
            "syn-070-116-227-097"
         ],
         "hostname" : [
            "70.116.227.97",
            "syn-070-116-227-097.biz.spectrum.com"
         ],
         "ip" : "70.116.227.97",
         "ipv6" : "false",
         "latitude" : "29.6584",
         "location" : "29.6584,-98.4987",
         "longitude" : "-98.4987",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TWC-11427-TEXAS",
         "port" : 6984,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Permanently",
         "reverse" : [
            "syn-070-116-227-097.biz.spectrum.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 301,
         "subdomains" : [
            "biz.spectrum.com"
         ],
         "subnet" : "70.112.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 202.180.122.189:6984 (tcp/http) - last seen on 2024-11-07 at 03:04:44 UTC

    • IP
      202.180.122.189
      Network
      202.180.112.0/20
      Domain(s)
      callplus.net.nz
      Device

      <enterprise field>: device.class

      URL

      http://202.180.122.189:6984/static/index.html 301

      HTTP Title
      Moved Permanently
      Reverse DNS
      static-cpe-pool.callplus.net.nz
      ASN
      AS9790
      Organization
      Two Degrees Networks Limited
      Protocol
      http
      Source
      urlscan::redirect
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1d6ca02635c935c0c11b339583c92a2a
      HTTP Header MD5
      2c561ce2561b7f6113f96cf56b362b57
      HTTP Body MD5
      6d74b20c6fa245a96aa940816c13f6ff
    • HTTP/1.1 301 Moved Permanently
      Access-Control-Allow-Origin: *
      Content-Length: 98
      Content-Type: text/html; charset=utf-8
      Date: Thu, 07 Nov 2024 03:04:42 GMT
      Location: https://<ip>:6984/static/index.html
      
      <HTML><HEAD><TITLE>Moved Permanently</TITLE></HEAD><BODY><H1>301 Moved Permanently -- </H1></BODY>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:04:44.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "6d74b20c6fa245a96aa940816c13f6ff",
               "bodymmh3" : -2097937471,
               "headermd5" : "2c561ce2561b7f6113f96cf56b362b57",
               "headermmh3" : 1026169149,
               "title" : "Moved Permanently"
            },
            "length" : 308
         },
         "asn" : "AS9790",
         "city" : "Hamilton",
         "country" : "NZ",
         "data" : "HTTP/1.1 301 Moved Permanently\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 98\r\nContent-Type: text/html; charset=utf-8\r\nDate: Thu, 07 Nov 2024 03:04:42 GMT\r\nLocation: https://<ip>:6984/static/index.html\r\n\r\n<HTML><HEAD><TITLE>Moved Permanently</TITLE></HEAD><BODY><H1>301 Moved Permanently -- </H1></BODY>",
         "datamd5" : "1d6ca02635c935c0c11b339583c92a2a",
         "datammh3" : -2117936906,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "callplus.net.nz"
         ],
         "forward" : "202.180.122.189",
         "geolocus" : {
            "asn" : "AS9790",
            "continent" : "OC",
            "continentname" : "Oceania",
            "country" : "NZ",
            "countryname" : "New Zealand",
            "domain" : [
               "2degrees.nz",
               "vocus.co.nz"
            ],
            "isineu" : "false",
            "latitude" : "-40.900557",
            "location" : "-40.900557,174.885971",
            "longitude" : "174.885971",
            "netname" : "TWO-DEGREES-NZ",
            "organization" : "Two Degrees Mobile Limited",
            "subnet" : "202.180.112.0/20"
         },
         "host" : [
            "static-cpe-pool"
         ],
         "hostname" : [
            "202.180.122.189",
            "static-cpe-pool.callplus.net.nz"
         ],
         "ip" : "202.180.122.189",
         "ipv6" : "false",
         "latitude" : "-37.7837",
         "location" : "-37.7837,175.2824",
         "longitude" : "175.2824",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Two Degrees Networks Limited",
         "port" : 6984,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Permanently",
         "reverse" : [
            "static-cpe-pool.callplus.net.nz"
         ],
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 301,
         "subnet" : "202.180.112.0/20",
         "tld" : [
            "net.nz"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/static/index.html"
      }
      
  • 37.0.12.31:6984 (tcp/http) - last seen on 2024-11-07 at 02:58:52 UTC

    • IP
      37.0.12.31
      Network
      37.0.12.0/24
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor

      Operating System
      SonicWall SonicOS
      URL

      http://37.0.12.31:6984/api/sonicos/tfa 404

      HTTP Title
      File not found!
      ASN
      AS206804
      Organization
      EstNOC OY
      Protocol
      http
      Source
      sonicwall::mfa
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      5755cb1445e9589ecab966c61b395fa7
      HTTP Header MD5
      0e862c2c5c858aca5aaf86c297935dc8
      HTTP Body MD5
      326456eeee37a65622c86c2f63664d55
    • HTTP/1.0 404 Not Found
      Server: SonicWALL
      Expires: -1
      Cache-Control: no-cache
      Content-type: text/html;charset=UTF-8
      X-Content-Type-Options: nosniff
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css"><!--/*--><![CDATA[/*><!--*/ body { color: #000000; background-color: #FFFFFF; }
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:58:52.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "326456eeee37a65622c86c2f63664d55",
               "bodymmh3" : 67183679,
               "component" : [
                  {
                     "productvendor" : "SonicWall",
                     "product" : "SonicWall"
                  }
               ],
               "headermd5" : "0e862c2c5c858aca5aaf86c297935dc8",
               "headermmh3" : 762823540,
               "title" : "File not found!"
            },
            "length" : 468
         },
         "asn" : "AS206804",
         "city" : "Johor Bahru",
         "country" : "MY",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 404 Not Found\r\nServer: SonicWALL\r\nExpires: -1\r\nCache-Control: no-cache\r\nContent-type: text/html;charset=UTF-8\r\nX-Content-Type-Options: nosniff\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\"\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\"><html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"en\" xml:lang=\"en\"><head><title>File not found!</title><style type=\"text/css\"><!--/*--><![CDATA[/*><!--*/ body { color: #000000; background-color: #FFFFFF; }",
         "datamd5" : "5755cb1445e9589ecab966c61b395fa7",
         "datammh3" : 1575132516,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "forward" : "37.0.12.31",
         "hostname" : [
            "37.0.12.31"
         ],
         "ip" : "37.0.12.31",
         "ipv6" : "false",
         "latitude" : "1.4594",
         "location" : "1.4594,103.7549",
         "longitude" : "103.7549",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "EstNOC OY",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 6984,
         "productvendor" : "SonicWall",
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Not Found",
         "seen_date" : "2024-11-07",
         "source" : "sonicwall::mfa",
         "status" : 404,
         "subnet" : "37.0.12.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/api/sonicos/tfa"
      }
      
  • 103.43.16.109:6984 (tcp/http) - last seen on 2024-11-07 at 02:38:11 UTC

    • IP
      103.43.16.109
      Network
      103.43.16.0/22
      Device

      <enterprise field>: device.class

      URL

      http://103.43.16.109:6984/$%7BrandomUrl%7D 200

      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a921ec0c33b287a5b32845ce36a9f9b4
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      db475c674e230d3b59b9d4c51e192872
    • HTTP/1.1 200 OK
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 02:37:30 GMT
      Content-Type: text/html
      Content-Length: 1728
      Last-Modified: Mon, 04 Nov 2024 11:57:54 GMT
      Connection: close
      ETag: "6728b6c2-6c0"
      Accept-Ranges: bytes
      
      <!DOCTYPE html>
      <html lang="zh-CN">
      <head>
          <!-- Google tag (gtag.js) -->
          <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
          <script>
              <script>
                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('js', new Date());
      
                  gtag('config', 'G-0GJHN159XX');
          </script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3GuWRdQLAUfAEIDe",ck:"3GuWRdQLAUfAEIDe"})</script>
      
      
      
          <meta charset="UTF-8">
          <meta name="format-detection" content="telephone=yes">
          <meta name="viewport"
                content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
          <script>
              const urls = [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/"
              ];
              const randomUrl = urls[Math.floor(Math.random() * urls.length)];
      
              document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
              window.onload = function () {
                  document.getElementById('myiframe').src = randomUrl;
              };
          </script>
          <style>
              body, html {
                  margin: 0;
                  padding: 0;
                  height: 100%;
                  overflow: hidden;
              }
      
              iframe {
                  width: 100%;
                  height: 100vh;
                  border: none;
              }
          </style>
      </head>
      <body>
      <iframe id="myiframe" scrolling="no"></iframe>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:38:11.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "googletagmanager.com"
               ],
               "hostname" : [
                  "www.googletagmanager.com"
               ],
               "ip" : [
                  "162.14.69.113",
                  "139.155.134.148"
               ],
               "url" : [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/",
                  "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
               ]
            },
            "http" : {
               "bodymd5" : "db475c674e230d3b59b9d4c51e192872",
               "bodymmh3" : 488145746,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 04 Nov 2024 11:57:54 GMT"
                  },
                  {
                     "value" : "6728b6c2-6c0",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
               "headermmh3" : 1181014729,
               "tracker" : {
                  "ga" : [
                     "G-0GJHN159XX"
                  ]
               }
            },
            "length" : 1962
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 02:37:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 1728\r\nLast-Modified: Mon, 04 Nov 2024 11:57:54 GMT\r\nConnection: close\r\nETag: \"6728b6c2-6c0\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3GuWRdQLAUfAEIDe\",ck:\"3GuWRdQLAUfAEIDe\"})</script>\n\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://139.155.134.148/tt/test.html?333?666aaa\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
         "datamd5" : "a921ec0c33b287a5b32845ce36a9f9b4",
         "datammh3" : -1249100627,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "103.43.16.109",
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "103.43.16.0/22"
         },
         "hostname" : [
            "103.43.16.109"
         ],
         "ip" : "103.43.16.109",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "port" : 6984,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "103.43.16.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/$%7BrandomUrl%7D"
      }
      
  • 46.149.203.227:6984 (tcp/http) - last seen on 2024-11-07 at 02:36:48 UTC

    • IP
      46.149.203.227
      Network
      46.149.192.0/20
      Device

      <enterprise field>: device.class

      URL

      http://46.149.203.227:6984/$%7BrandomUrl%7D 200

      ASN
      AS59371
      Organization
      Dimension Network & Communication Limited
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      42ab9129dcead98e259997777bebcb1e
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      70cfb11d29734826a5a636c5671a5689
    • HTTP/1.1 200 OK
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 02:36:46 GMT
      Content-Type: text/html
      Content-Length: 1727
      Last-Modified: Mon, 04 Nov 2024 11:58:32 GMT
      Connection: close
      ETag: "6728b6e8-6bf"
      Accept-Ranges: bytes
      
      <!DOCTYPE html>
      <html lang="zh-CN">
      <head>
          <!-- Google tag (gtag.js) -->
          <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
          <script>
              <script>
                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('js', new Date());
      
                  gtag('config', 'G-0GJHN159XX');
          </script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3GuWRdQLAUfAEIDe",ck:"3GuWRdQLAUfAEIDe"})</script>
      
      
          <meta charset="UTF-8">
          <meta name="format-detection" content="telephone=yes">
          <meta name="viewport"
                content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
          <script>
              const urls = [
                  "https://139.155.134.148/tt/test.html?333?666bbb",
                  "https://162.14.69.113/"
              ];
              const randomUrl = urls[Math.floor(Math.random() * urls.length)];
      
              document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
              window.onload = function () {
                  document.getElementById('myiframe').src = randomUrl;
              };
          </script>
          <style>
              body, html {
                  margin: 0;
                  padding: 0;
                  height: 100%;
                  overflow: hidden;
              }
      
              iframe {
                  width: 100%;
                  height: 100vh;
                  border: none;
              }
          </style>
      </head>
      <body>
      <iframe id="myiframe" scrolling="no"></iframe>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:36:48.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "googletagmanager.com"
               ],
               "hostname" : [
                  "www.googletagmanager.com"
               ],
               "ip" : [
                  "162.14.69.113",
                  "139.155.134.148"
               ],
               "url" : [
                  "https://139.155.134.148/tt/test.html?333?666bbb",
                  "https://162.14.69.113/",
                  "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
               ]
            },
            "http" : {
               "bodymd5" : "70cfb11d29734826a5a636c5671a5689",
               "bodymmh3" : -1468966060,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 04 Nov 2024 11:58:32 GMT"
                  },
                  {
                     "value" : "6728b6e8-6bf",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
               "headermmh3" : -322410203,
               "tracker" : {
                  "ga" : [
                     "G-0GJHN159XX"
                  ]
               }
            },
            "length" : 1961
         },
         "asn" : "AS59371",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 02:36:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 1727\r\nLast-Modified: Mon, 04 Nov 2024 11:58:32 GMT\r\nConnection: close\r\nETag: \"6728b6e8-6bf\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3GuWRdQLAUfAEIDe\",ck:\"3GuWRdQLAUfAEIDe\"})</script>\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://139.155.134.148/tt/test.html?333?666bbb\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
         "datamd5" : "42ab9129dcead98e259997777bebcb1e",
         "datammh3" : -823944532,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "46.149.203.227",
         "hostname" : [
            "46.149.203.227"
         ],
         "ip" : "46.149.203.227",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Dimension Network & Communication Limited",
         "port" : 6984,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "46.149.192.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/$%7BrandomUrl%7D"
      }
      
  • 43.251.236.21:6984 (tcp/http) - last seen on 2024-11-07 at 02:27:22 UTC

    • IP
      43.251.236.21
      Network
      43.251.236.0/22
      Device

      <enterprise field>: device.class

      URL

      http://43.251.236.21:6984/$%7BrandomUrl%7D 200

      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a1a952682e73758a5ad3c1462ccfc9e8
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      f676b85516c6adce06fd47604ce661a9
    • HTTP/1.1 200 OK
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 02:27:21 GMT
      Content-Type: text/html
      Content-Length: 1731
      Last-Modified: Mon, 04 Nov 2024 06:13:00 GMT
      Connection: close
      ETag: "672865ec-6c3"
      Accept-Ranges: bytes
      
      <!DOCTYPE html>
      <html lang="zh-CN">
      <head>
          <!-- Google tag (gtag.js) -->
          <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
          <script>
              <script>
                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('js', new Date());
      
                  gtag('config', 'G-0GJHN159XX');
          </script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3HIVnf9pT2UywXqw",ck:"3HIVnf9pT2UywXqw"})</script>
      
      
      
      
          <meta charset="UTF-8">
          <meta name="format-detection" content="telephone=yes">
          <meta name="viewport"
                content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
          <script>
              const urls = [
                  "https://103.86.44.21/sanfang/index.html?303111aaa",
                  "https://162.14.69.113/"
              ];
              const randomUrl = urls[Math.floor(Math.random() * urls.length)];
      
              document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
              window.onload = function () {
                  document.getElementById('myiframe').src = randomUrl;
              };
          </script>
          <style>
              body, html {
                  margin: 0;
                  padding: 0;
                  height: 100%;
                  overflow: hidden;
              }
      
              iframe {
                  width: 100%;
                  height: 100vh;
                  border: none;
              }
          </style>
      </head>
      <body>
      <iframe id="myiframe" scrolling="no"></iframe>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:27:22.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "googletagmanager.com"
               ],
               "hostname" : [
                  "www.googletagmanager.com"
               ],
               "ip" : [
                  "103.86.44.21",
                  "162.14.69.113"
               ],
               "url" : [
                  "https://103.86.44.21/sanfang/index.html?303111aaa",
                  "https://162.14.69.113/",
                  "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
               ]
            },
            "http" : {
               "bodymd5" : "f676b85516c6adce06fd47604ce661a9",
               "bodymmh3" : 1332320570,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 04 Nov 2024 06:13:00 GMT"
                  },
                  {
                     "value" : "672865ec-6c3",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
               "headermmh3" : 758056649,
               "tracker" : {
                  "ga" : [
                     "G-0GJHN159XX"
                  ]
               }
            },
            "length" : 1965
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 02:27:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 1731\r\nLast-Modified: Mon, 04 Nov 2024 06:13:00 GMT\r\nConnection: close\r\nETag: \"672865ec-6c3\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3HIVnf9pT2UywXqw\",ck:\"3HIVnf9pT2UywXqw\"})</script>\n\n\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://103.86.44.21/sanfang/index.html?303111aaa\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
         "datamd5" : "a1a952682e73758a5ad3c1462ccfc9e8",
         "datammh3" : -1968554267,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "43.251.236.21",
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "43.251.236.0/22"
         },
         "hostname" : [
            "43.251.236.21"
         ],
         "ip" : "43.251.236.21",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "port" : 6984,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "43.251.236.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/$%7BrandomUrl%7D"
      }
      
  • 154.204.41.15:6984 (tcp/http) - last seen on 2024-11-07 at 02:23:09 UTC

    • IP
      154.204.41.15
      Network
      154.204.41.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://154.204.41.15:6984/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Thu, 07 Nov 2024 02:23:08 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:23:09.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : -1318876650,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Thu, 07 Nov 2024 02:23:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS133199",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "SonderCloud_Limited",
            "organization" : "SonderCloud Limited",
            "subnet" : "154.204.41.0/24"
         },
         "ip" : "154.204.41.15",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 6984,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "154.204.41.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 102.222.100.156:6984 (tcp/http) - last seen on 2024-11-07 at 02:22:03 UTC

    • IP
      102.222.100.156
      Network
      102.222.100.0/22
      Domain(s)
      nog.net.za
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux sUse
      URL

      http://102.222.100.156:6984/ 200

      Reverse DNS
      shadowserver.umh.nog.net.za
      ASN
      AS328365
      Organization
      Edge-connect
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux sUse
      Product
      ConnectWise Control 21.14.5924.8013
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      89c681eaf8fb01680ba06a248c645aff
      HTTP Header MD5
      ed6e16a0ab763a80791a11bd17323549
      HTTP Body MD5
      1c2dccd5fe68b91cc0324c00dfb3a621
    • HTTP/1.1 200 OK
      Cache-Control: private
      Content-Length: 143555
      Content-Type: text/html; charset=utf-8
      Server: ScreenConnect/21.14.5924.8013-1372366428 Microsoft-HTTPAPI/2.0
      X-Robots-Tag: noindex
      P3P: CP="NON CUR OUR STP STA PRE"
      Date: Thu, 07 Nov 2024 02:22:01 UTC
      
      
      <!DOCTYPE html>
      <html>
      <head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" />
      	<script>
      
      		function setTaggedSessionInfo(tag, taggedSessionInfo) {
      			var oldTaggedSessionInfo = window._taggedSessionInfos[tag];
      			window._taggedSessionInfos[tag] = taggedSessionInfo;
      
      			if (!oldTaggedSessionInfo || taggedSessionInfo.SessionID != oldTaggedSessionInfo.SessionID || taggedSessionInfo.Code != oldTaggedSessionInfo.Code)
      				SC.pagedata.notifyDirty();
      		}
      
      		// backwards compatibility with extensions
      		function setTaggedSessionID(tag, sessionID) {
      			window.setTaggedSessionInfo(tag, { SessionID: sessionID });
      		}
      
      		function getTaggedSessionInfo(tag) {
      			return window._taggedSessionInfos[tag];
      		}
      
      	</script>
      <script src="Script.ashx?__Cache=d3f0e1a0-3d38-4627-b55e-fc0e7a52411e" id="defaultScript"></script>
      <link href="App_Themes/DarkWithBlue/Default.css?__Cache=26fdcedc-32d6-4732-97d3-63ae494b3d3a" type="text/css" rel="stylesheet" /><link href="FavIcon.axd?__Cache=9ac7c99e-d8e6-44f8-a2e8-fca7417035b0" rel="shortcut icon" />
      <script>SC.util.mergeIntoContext({"focusedControlID":null,"userName":"","userDisplayName":"","isUserAuthenticated":false,"antiForgeryToken":"THtoAUxH4sS9Sucsl1qCcEN6XdS3BrDxLYSJrioJ9dgBAAB9A3kYzrotQg==","isUserAdministrator":false,"canManageSharedToolbox":false,"pageBaseFileName":"Guest","notifyActivityFrequencyMilliseconds":600000,"loginAfterInactivityMilliseconds":36000000,"canChangePassword":false,"controlPanelUrl":null,"pageType":"GuestPage","processType":2,"userAgentOverride":null,"sessionTypeInfos":[]});</script>
      <script src="App_Extensions/edb5cea7-1d6c-40eb-b486-6b18a9a54a6a/json_search.js"></script>
      <link href="App_Extensions/fd656f55-7f36-4c5c-ac92-67533d630386/flatpickr.min.css" type="text/css" rel="stylesheet" />
      <link href="App_Extensions/fd656f55-7f36-4c5c-ac92-67533d630386/ChatTranscriptStylesheet.css" type="text/css" rel="stylesheet" />
      <link href="App_Extensions/82ff7736-d40b-43f0-9375-3394e4cdfb61/Style.css" type="text/css" rel="stylesheet" />
      <script>SC.extension.addInitializeProc('2e5882e3-fb36-4ad4-bdf7-0f14f3bdcf7e', function (extensionContext) {
      SC.event.addGlobalHandler(SC.event.PreRender, function (eventArgs) {
      	if (SC.context.pageType == 'GuestPage')
      	{
      		SC.util.includeStyleSheet(extensionContext.baseUrl + 'LogoLinkStyle.css');
      		var logoImage = $('.LogoPanel');
      		
      		if (extensionContext.settingValues.LogoImageLinkURL !== ''){
      			logoImage.onclick=function() {
      				window.open(extensionContext.settingValues.LogoImageLinkURL);
      			};
      			logoImage.onmouseover=function(){
      				logoImage.style.cursor = "pointer";
      			};
      		}
      	}
      });
      });</script>
      <script>SC.extension.addInitializeProc('c42e9fe5-f4aa-4698-bb71-ae68b8a23890', function (extensionContext) {
      /** Advanced SMTP Settings (1.2.3.0) **/
      var extensionId = extensionContext.baseUrl.split("/").slice(-2)[0];
      IS_CLOUD = /^.*\.(screenconnect|hostedrmm)\.com$/.test(SC.context.clp.h);
      EMPTY_PASSWORD = "\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd";
      
      /***** Extension Help Option *****/
      var helpLink = "https://help.screenconnect.com/Extension:Advanced_SMTP_Settings";
      var extensionResourceID = "EditSMTPSettings";
      
      SC.event.addGlobalHandler(SC.event.QueryCommandButtonState, function (eventArgs) {
      	switch (eventArgs.commandName) {
      		case 'EditExtensionSettings':
      			if (eventArgs.commandContext.extensionInfo.ExtensionID == extensionId && eventArgs.commandElement._commandName == "EditExtensionSettings")
      				SC.ui.addElement(eventArgs.target.parentElement, "A", {
      					href: "#",
      					_commandName: (SC.context.scriptBaseUrl.indexOf("https://") == helpLink.indexOf("https://") ? 'ShowHelpLink_' : 'OpenHelpLink_') + extensionId,
      					_innerText: SC.res['Command.Help.Text'].replace(" ▽", "")
      				});
      			break;
      	}
      });
      
      SC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {
      	switch (eventArgs.commandName) {
      		case 'ShowHelpLink_' + extensionId:
      			SC.dialog.showModalPage(SC.res['Command.Help.Text'].replace(" ▽", ""), helpLink, null);
      			break;
      		case 'OpenHelpLink_' + extensionId:
      			window.open(helpLink, "_blank");
      			break;
      	}
      });
      /*********************************/
      
      SC.service.GetMailConfigurationInfo = SC.service.GetAdvancedMailConfigurationInfo;
      SC.res['Command.EditAdvancedMailConfiguration.Text'] = SC.res['Command.EditMailConfiguration.Text'];
      
      SC.event.addGlobalHandler(SC.event.PageDataRefreshed, function () {
      	if (SC.context.pageType == 'AdministrationPage' && SC.context.tabKeys[SC.context.tabIndex] == 'Mail') {
      		var mailConfiguration = SC.pagedata.get();
      		SC.types.SmtpDeliveryMethod = mailConfiguration.SmtpDeliveryMethod;
      
      		SC.ui.setContents($('.MailPanel'), [
      			$dt([
      				$h3({_textResource: 'MailPanel.MailTitle'}),
      				$p({className: 'CommandList'}, SC.command.createCommandButtons([{commandName: 'EditAdvancedMailConfiguration'}])),
      			]),
      			$dd([
      				$dl([
      					$dt({_textResource: 'MailPanel.MailDeliveryText'}),
      					$dd(mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod.Network
      						? SC.util.isNullOrEmpty(mailConfiguration.smtpRelayServerHostName)
      							? SC.res['MailPanel.SmtpDirectRadioButtonText']
      							: SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.RelaySettingsTextFormat'],
      								mailConfiguration.smtpRelayServerHostName,
      								mailConfiguration.smtpRelayServerPort == 25 ? null : ':' + mailConfiguration.smtpRelayServerPort,
      								mailConfiguration.enableSSL ? SC.res['Extension.SMTPSettings.MailPanel.UseSSLText'] : null,
      								mailConfiguration.smtpUseDefaultCredentials
      									? SC.util.formatString(
      										SC.res['Extension.SMTPSettings.MailPanel.UsingDefaultCredentialsTextFormat'],
      										(!SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkTargetName)
      												? SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.SPNLabelTextFormat'], mailConfiguration.smtpNetworkTargetName)
      												: ''
      										)
      									)
      									: !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword)
      										? SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.UsernameLabelTextFormat'], mailConfiguration.smtpNetworkUserName)
      										: null
      							)
      						: mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod.PickupDirectoryFromIis
      							? SC.res['Extension.SMTPSettings.MailPanel.UsingIISPickupDirectoryText']
      							: SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.UsingSpecifiedPickupDirectoryTextFormat'], mailConfiguration.smtpPickupDirectoryLocation)
      					),
      					$dt({_textResource: 'MailPanel.DefaultFromAddressLabelText'}),
      					$dd(mailConfiguration.defaultMailFromAddress || SC.res['MailPanel.UnsetLabelText']),
      					$dt({_textResource: 'MailPanel.DefaultToAddressLabelText'}),
      					$dd(mailConfiguration.defaultMailToAddress || SC.res['MailPanel.UnsetLabelText']),
      				]),
      			]),
      		]);
      	}
      });
      
      SC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {
      	switch (eventArgs.commandName) {
      		case 'EditAdvancedMailConfiguration':
      			var mailConfiguration = SC.pagedata.get();
      
      		function getControlsForDeliveryMethod(deliveryMethodName) {
      			var setRadioButtonChecked = function () {
      				SC.dialog.getModalDialog().querySelector('.' + deliveryMethodName + 'RadioButton').checked = true;
      			};
      			var setBothRadioButtonsChecked = function (eventArgs) {
      				setRadioButtonChecked();
      				SC.ui.findDescendantBreadthFirst(SC.ui.findAncestorByTag(eventArgs.target, 'DD'), function (_) {
      					return _.name == 'SmtpAuthenticationType'
      				}).checked = true;
      			};
      
      			switch (deliveryMethodName) {
      				case 'Relay': // this isn't a value of SmtpDeliveryMethod, just Network with extra parameters
      					return $dl({className: 'SmtpRelaySettingsList'}, [
      						$dt(SC.res['Extension.SMTPSettings.NetworkSettingsLabelText']),
      						$dd([
      							$label([
      								$span(SC.res['Extension.SMTPSettings.RelayServerLabelText']),
      								$input({
      									type: 'text',
      									className: 'SmtpRelayServerBox',
      									value: mailConfiguration.smtpRelayServerHostName,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      								}),
      							]),
      						]),
      						$dd([
      							$label([
      								$span(SC.res['Extension.SMTPSettings.RelayServerPortLabelText']),
      								$input({
      									type: 'number',
      									className: 'SmtpRelayServerPortBox',
      									value: mailConfiguration.smtpRelayServerPort,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      									_attributeMap: {
      										max: 65535,
      										min: 1,
      										placeholder: 25,
      									},
      								}),
      							]),
      						]),
      						$dd([
      							$label([
      								$input({
      									type: 'checkbox',
      									className: 'SmtpRelayServerEnableSSLCheckbox',
      									checked: mailConfiguration.enableSSL,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      								}),
      								$span(SC.res['Extension.SMTPSettings.UseSSLLabelText']),
      							]),
      						]),
      						$dt(SC.res['Extension.SMTPSettings.AuthenticationSettingsLabelText']),
      						$dd([
      							$label([
      								$input({
      									type: 'radio',
      									name: 'SmtpAuthenticationType',
      									value: 'None',
      									checked: (SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) || SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword)) && !mailConfiguration.smtpUseDefaultCredentials,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      								}),
      								$span(SC.res['Extension.SMTPSettings.AnonymousCredentialsLabelText']),
      							]),
      						]),
      						$dd([
      							$label([
      								$input({
      									type: 'radio',
      									name: 'SmtpAuthenticationType',
      									value: 'Windows',
      									checked: mailConfiguration.smtpUseDefaultCredentials,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      								}),
      								$span(SC.res['Extension.SMTPSettings.DefaultCredentialsLabelText']),
      							]),
      							$label([
      								$span(SC.res['Extension.SMTPSettings.NetworkTargetNameLabelText']),
      								$input({
      									type: 'text',
      									className: 'SmtpAuthSPNBox',
      									value: mailConfiguration.smtpNetworkTargetName,
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      							]),
      						]),
      						$dd([
      							$label([
      								$input({
      									type: 'radio',
      									name: 'SmtpAuthenticationType',
      									value: 'Credentials',
      									checked: !mailConfiguration.smtpUseDefaultCredentials && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword),
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      								$span(SC.res['Extension.SMTPSettings.AccountCredentialsLabelText']),
      							]),
      							$label([
      								$span(SC.res['Extension.SMTPSettings.UsernameLabelText']),
      								$input({
      									type: 'text',
      									className: 'SmtpAuthUsernameBox',
      									value: mailConfiguration.smtpNetworkUserName,
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      							]),
      							$label([
      								$span(SC.res['Extension.SMTPSettings.PasswordLabelText']),
      								$input({
      									type: 'password',
      									className: 'SmtpAuthPasswordBox',
      									value: mailConfiguration.smtpNetworkPassword,
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      							]),
      							$label([
      								$span(SC.res['Extension.SMTPSettings.ConfirmPasswordLabelText']),
      								$input({
      									type: 'password',
      									className: 'SmtpAuthConfirmPasswordBox',
      									value: mailConfiguration.smtpNetworkPassword,
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      							]),
      						]),
      					]);
      
      				case 'SpecifiedPickupDirectory':
      					return $input({
      						type: 'text',
      						className: 'SmtpPickupDirectoryLocationBox',
      						value: mailConfiguration.smtpPickupDirectoryLocation,
      						_eventHandlerMap: {focus: setRadioButtonChecked},
      					});
      
      				default: // network, iispickup
      					return null;
      			}
      		}
      
      			SC.dialog.showModalDialog('EditMailConfiguration', {
      				titleResourceName: 'EditMailConfigurationPanel.Title',
      				content: [
      					$dl([
      						$dt({_textResource: 'MailPanel.MailDeliveryText'}),
      						$dd(
      							['Network', 'PickupDirectoryFromIis', 'SpecifiedPickupDirectory', 'Relay'].filter(function (_) {
      								return !IS_CLOUD || _ == 'Network' || _ == 'Relay'
      							}).map(function (_) {
      								return [
      									$label([
      										$input({
      											type: 'radio',
      											name: 'MailDelivery',
      											className: _ + 'RadioButton',
      											value: _,
      											checked: _ == 'Relay' ? !SC.util.isNullOrEmpty(mailConfiguration.smtpRelayServerHostName) : mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod[_],
      										}),
      										$span({_textResource: 'MailPanel.Smtp' + (_ == 'Network' ? 'Direct' : _) + 'RadioButtonText'}),
      									]),
      									getControlsForDeliveryMethod(_),
      								];
      							})
      						),
      						$dt({_textResource: 'MailPanel.DefaultFromAddressLabelText'}),
      						$dd([
      							$input({
      								type: 'text',
      								className: 'DefaultMailFromAddressBox',
      								value: mailConfiguration.defaultMailFromAddress,
      							}),
      						]),
      						$dt({_textResource: 'MailPanel.DefaultToAddressLabelText'}),
      						$dd([
      							$div([
      								$input({
      									type: 'text',
      									className: 'DefaultMailToAddressBox',
      									value: mailConfiguration.defaultMailToAddress,
      								}),
      								$button({
      									className: 'SecondaryButton',
      									_textResource: 'MailPanel.SendTestMailButtonText',
      									_commandName: 'SendAdvancedTestEmail',
      								}),
      							]),
      						]),
      					]),
      					$p({className: 'ResultPanel'}),
      				],
      				buttonTextResourceName: 'EditMailConfigurationPanel.ButtonText',
      				onExecuteCommandProc: function (dialogEventArgs, dialog, closeDialogProc, setDialogErrorProc) {
      					var authenticationMethod = SC.ui.getSelectedRadioButtonValue(dialog.querySelector('.SmtpRelaySettingsList'));
      
      					var smtpDeliveryMethodName = SC.ui.getSelectedRadioButtonValue(dialog);
      					var useExtraNetworkSettings = false;
      					if (smtpDeliveryMethodName == 'Relay') {
      						smtpDeliveryMethodName = 'Network'; // convert to valid SmtpDeliveryMethod value
      						useExtraNetworkSettings = true;
      					}
      
      					var defaultMailFromAddress = dialog.querySelector('.DefaultMailFromAddressBox').value.trim();
      					var defaultMailToAddress = dialog.querySelector('.DefaultMailToAddressBox').value.trim();
      					var smtpRelayServerHostName = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerBox').value.trim() || null : null;
      					var smtpRelayServerPort = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerPortBox').value.trim() || null : null;
      					var enableSSL = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerEnableSSLCheckbox').checked : null;
      					var smtpPickupDirectoryLocation = smtpDeliveryMethodName == 'SpecifiedPickupDirectory' ? dialog.querySelector('.SmtpPickupDirectoryLocationBox').value.trim() || null : null;
      					var smtpUseDefaultCredentials = useExtraNetworkSettings && authenticationMethod == 'Windows' || null;
      					var smtpNetworkTargetName = useExtraNetworkSettings && authenticationMethod == 'Windows' ? dialog.querySelector('.SmtpAuthSPNBox').value.trim() || null : null;
      					var smtpNetworkUserName = useExtraNetworkSettings && authenticationMethod == 'Credentials' ? dialog.querySelector('.SmtpAuthUsernameBox').value.trim() || null : null;
      					var smtpNetworkPassword = useExtraNetworkSettings && authenticationMethod == 'Credentials' ? dialog.querySelector('.SmtpAuthPasswordBox').value.trim() || null : null;
      
      					va
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:22:03.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "screenconnect.com"
               ],
               "hostname" : [
                  "help.screenconnect.com"
               ],
               "ip" : [
                  "1.2.3.0"
               ],
               "url" : [
                  "https://help.screenconnect.com/Extension:Advanced_SMTP_Settings"
               ]
            },
            "http" : {
               "bodymd5" : "1c2dccd5fe68b91cc0324c00dfb3a621",
               "bodymmh3" : 1957778549,
               "headermd5" : "ed6e16a0ab763a80791a11bd17323549",
               "headermmh3" : 1066124309
            },
            "length" : 16384
         },
         "asn" : "AS328365",
         "country" : "ZA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nCache-Control: private\r\nContent-Length: 143555\r\nContent-Type: text/html; charset=utf-8\r\nServer: ScreenConnect/21.14.5924.8013-1372366428 Microsoft-HTTPAPI/2.0\r\nX-Robots-Tag: noindex\r\nP3P: CP=\"NON CUR OUR STP STA PRE\"\r\nDate: Thu, 07 Nov 2024 02:22:01 UTC\r\n\r\n\r\n<!DOCTYPE html>\r\n<html>\r\n<head><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" /><meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no\" />\r\n\t<script>\r\n\r\n\t\tfunction setTaggedSessionInfo(tag, taggedSessionInfo) {\r\n\t\t\tvar oldTaggedSessionInfo = window._taggedSessionInfos[tag];\r\n\t\t\twindow._taggedSessionInfos[tag] = taggedSessionInfo;\r\n\r\n\t\t\tif (!oldTaggedSessionInfo || taggedSessionInfo.SessionID != oldTaggedSessionInfo.SessionID || taggedSessionInfo.Code != oldTaggedSessionInfo.Code)\r\n\t\t\t\tSC.pagedata.notifyDirty();\r\n\t\t}\r\n\r\n\t\t// backwards compatibility with extensions\r\n\t\tfunction setTaggedSessionID(tag, sessionID) {\r\n\t\t\twindow.setTaggedSessionInfo(tag, { SessionID: sessionID });\r\n\t\t}\r\n\r\n\t\tfunction getTaggedSessionInfo(tag) {\r\n\t\t\treturn window._taggedSessionInfos[tag];\r\n\t\t}\r\n\r\n\t</script>\r\n<script src=\"Script.ashx?__Cache=d3f0e1a0-3d38-4627-b55e-fc0e7a52411e\" id=\"defaultScript\"></script>\r\n<link href=\"App_Themes/DarkWithBlue/Default.css?__Cache=26fdcedc-32d6-4732-97d3-63ae494b3d3a\" type=\"text/css\" rel=\"stylesheet\" /><link href=\"FavIcon.axd?__Cache=9ac7c99e-d8e6-44f8-a2e8-fca7417035b0\" rel=\"shortcut icon\" />\r\n<script>SC.util.mergeIntoContext({\"focusedControlID\":null,\"userName\":\"\",\"userDisplayName\":\"\",\"isUserAuthenticated\":false,\"antiForgeryToken\":\"THtoAUxH4sS9Sucsl1qCcEN6XdS3BrDxLYSJrioJ9dgBAAB9A3kYzrotQg==\",\"isUserAdministrator\":false,\"canManageSharedToolbox\":false,\"pageBaseFileName\":\"Guest\",\"notifyActivityFrequencyMilliseconds\":600000,\"loginAfterInactivityMilliseconds\":36000000,\"canChangePassword\":false,\"controlPanelUrl\":null,\"pageType\":\"GuestPage\",\"processType\":2,\"userAgentOverride\":null,\"sessionTypeInfos\":[]});</script>\r\n<script src=\"App_Extensions/edb5cea7-1d6c-40eb-b486-6b18a9a54a6a/json_search.js\"></script>\r\n<link href=\"App_Extensions/fd656f55-7f36-4c5c-ac92-67533d630386/flatpickr.min.css\" type=\"text/css\" rel=\"stylesheet\" />\r\n<link href=\"App_Extensions/fd656f55-7f36-4c5c-ac92-67533d630386/ChatTranscriptStylesheet.css\" type=\"text/css\" rel=\"stylesheet\" />\r\n<link href=\"App_Extensions/82ff7736-d40b-43f0-9375-3394e4cdfb61/Style.css\" type=\"text/css\" rel=\"stylesheet\" />\r\n<script>SC.extension.addInitializeProc('2e5882e3-fb36-4ad4-bdf7-0f14f3bdcf7e', function (extensionContext) {\r\nSC.event.addGlobalHandler(SC.event.PreRender, function (eventArgs) {\r\n\tif (SC.context.pageType == 'GuestPage')\r\n\t{\r\n\t\tSC.util.includeStyleSheet(extensionContext.baseUrl + 'LogoLinkStyle.css');\r\n\t\tvar logoImage = $('.LogoPanel');\r\n\t\t\r\n\t\tif (extensionContext.settingValues.LogoImageLinkURL !== ''){\r\n\t\t\tlogoImage.onclick=function() {\r\n\t\t\t\twindow.open(extensionContext.settingValues.LogoImageLinkURL);\r\n\t\t\t};\r\n\t\t\tlogoImage.onmouseover=function(){\r\n\t\t\t\tlogoImage.style.cursor = \"pointer\";\r\n\t\t\t};\r\n\t\t}\r\n\t}\r\n});\r\n});</script>\r\n<script>SC.extension.addInitializeProc('c42e9fe5-f4aa-4698-bb71-ae68b8a23890', function (extensionContext) {\r\n/** Advanced SMTP Settings (1.2.3.0) **/\r\nvar extensionId = extensionContext.baseUrl.split(\"/\").slice(-2)[0];\r\nIS_CLOUD = /^.*\\.(screenconnect|hostedrmm)\\.com$/.test(SC.context.clp.h);\r\nEMPTY_PASSWORD = \"\\ufffd\\ufffd\\ufffd\\ufffd\\ufffd\\ufffd\\ufffd\\ufffd\";\r\n\r\n/***** Extension Help Option *****/\r\nvar helpLink = \"https://help.screenconnect.com/Extension:Advanced_SMTP_Settings\";\r\nvar extensionResourceID = \"EditSMTPSettings\";\r\n\r\nSC.event.addGlobalHandler(SC.event.QueryCommandButtonState, function (eventArgs) {\r\n\tswitch (eventArgs.commandName) {\r\n\t\tcase 'EditExtensionSettings':\r\n\t\t\tif (eventArgs.commandContext.extensionInfo.ExtensionID == extensionId && eventArgs.commandElement._commandName == \"EditExtensionSettings\")\r\n\t\t\t\tSC.ui.addElement(eventArgs.target.parentElement, \"A\", {\r\n\t\t\t\t\thref: \"#\",\r\n\t\t\t\t\t_commandName: (SC.context.scriptBaseUrl.indexOf(\"https://\") == helpLink.indexOf(\"https://\") ? 'ShowHelpLink_' : 'OpenHelpLink_') + extensionId,\r\n\t\t\t\t\t_innerText: SC.res['Command.Help.Text'].replace(\" \u25bd\", \"\")\r\n\t\t\t\t});\r\n\t\t\tbreak;\r\n\t}\r\n});\r\n\r\nSC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {\r\n\tswitch (eventArgs.commandName) {\r\n\t\tcase 'ShowHelpLink_' + extensionId:\r\n\t\t\tSC.dialog.showModalPage(SC.res['Command.Help.Text'].replace(\" \u25bd\", \"\"), helpLink, null);\r\n\t\t\tbreak;\r\n\t\tcase 'OpenHelpLink_' + extensionId:\r\n\t\t\twindow.open(helpLink, \"_blank\");\r\n\t\t\tbreak;\r\n\t}\r\n});\r\n/*********************************/\r\n\r\nSC.service.GetMailConfigurationInfo = SC.service.GetAdvancedMailConfigurationInfo;\r\nSC.res['Command.EditAdvancedMailConfiguration.Text'] = SC.res['Command.EditMailConfiguration.Text'];\r\n\r\nSC.event.addGlobalHandler(SC.event.PageDataRefreshed, function () {\r\n\tif (SC.context.pageType == 'AdministrationPage' && SC.context.tabKeys[SC.context.tabIndex] == 'Mail') {\r\n\t\tvar mailConfiguration = SC.pagedata.get();\r\n\t\tSC.types.SmtpDeliveryMethod = mailConfiguration.SmtpDeliveryMethod;\r\n\r\n\t\tSC.ui.setContents($('.MailPanel'), [\r\n\t\t\t$dt([\r\n\t\t\t\t$h3({_textResource: 'MailPanel.MailTitle'}),\r\n\t\t\t\t$p({className: 'CommandList'}, SC.command.createCommandButtons([{commandName: 'EditAdvancedMailConfiguration'}])),\r\n\t\t\t]),\r\n\t\t\t$dd([\r\n\t\t\t\t$dl([\r\n\t\t\t\t\t$dt({_textResource: 'MailPanel.MailDeliveryText'}),\r\n\t\t\t\t\t$dd(mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod.Network\r\n\t\t\t\t\t\t? SC.util.isNullOrEmpty(mailConfiguration.smtpRelayServerHostName)\r\n\t\t\t\t\t\t\t? SC.res['MailPanel.SmtpDirectRadioButtonText']\r\n\t\t\t\t\t\t\t: SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.RelaySettingsTextFormat'],\r\n\t\t\t\t\t\t\t\tmailConfiguration.smtpRelayServerHostName,\r\n\t\t\t\t\t\t\t\tmailConfiguration.smtpRelayServerPort == 25 ? null : ':' + mailConfiguration.smtpRelayServerPort,\r\n\t\t\t\t\t\t\t\tmailConfiguration.enableSSL ? SC.res['Extension.SMTPSettings.MailPanel.UseSSLText'] : null,\r\n\t\t\t\t\t\t\t\tmailConfiguration.smtpUseDefaultCredentials\r\n\t\t\t\t\t\t\t\t\t? SC.util.formatString(\r\n\t\t\t\t\t\t\t\t\t\tSC.res['Extension.SMTPSettings.MailPanel.UsingDefaultCredentialsTextFormat'],\r\n\t\t\t\t\t\t\t\t\t\t(!SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkTargetName)\r\n\t\t\t\t\t\t\t\t\t\t\t\t? SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.SPNLabelTextFormat'], mailConfiguration.smtpNetworkTargetName)\r\n\t\t\t\t\t\t\t\t\t\t\t\t: ''\r\n\t\t\t\t\t\t\t\t\t\t)\r\n\t\t\t\t\t\t\t\t\t)\r\n\t\t\t\t\t\t\t\t\t: !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword)\r\n\t\t\t\t\t\t\t\t\t\t? SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.UsernameLabelTextFormat'], mailConfiguration.smtpNetworkUserName)\r\n\t\t\t\t\t\t\t\t\t\t: null\r\n\t\t\t\t\t\t\t)\r\n\t\t\t\t\t\t: mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod.PickupDirectoryFromIis\r\n\t\t\t\t\t\t\t? SC.res['Extension.SMTPSettings.MailPanel.UsingIISPickupDirectoryText']\r\n\t\t\t\t\t\t\t: SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.UsingSpecifiedPickupDirectoryTextFormat'], mailConfiguration.smtpPickupDirectoryLocation)\r\n\t\t\t\t\t),\r\n\t\t\t\t\t$dt({_textResource: 'MailPanel.DefaultFromAddressLabelText'}),\r\n\t\t\t\t\t$dd(mailConfiguration.defaultMailFromAddress || SC.res['MailPanel.UnsetLabelText']),\r\n\t\t\t\t\t$dt({_textResource: 'MailPanel.DefaultToAddressLabelText'}),\r\n\t\t\t\t\t$dd(mailConfiguration.defaultMailToAddress || SC.res['MailPanel.UnsetLabelText']),\r\n\t\t\t\t]),\r\n\t\t\t]),\r\n\t\t]);\r\n\t}\r\n});\r\n\r\nSC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {\r\n\tswitch (eventArgs.commandName) {\r\n\t\tcase 'EditAdvancedMailConfiguration':\r\n\t\t\tvar mailConfiguration = SC.pagedata.get();\r\n\r\n\t\tfunction getControlsForDeliveryMethod(deliveryMethodName) {\r\n\t\t\tvar setRadioButtonChecked = function () {\r\n\t\t\t\tSC.dialog.getModalDialog().querySelector('.' + deliveryMethodName + 'RadioButton').checked = true;\r\n\t\t\t};\r\n\t\t\tvar setBothRadioButtonsChecked = function (eventArgs) {\r\n\t\t\t\tsetRadioButtonChecked();\r\n\t\t\t\tSC.ui.findDescendantBreadthFirst(SC.ui.findAncestorByTag(eventArgs.target, 'DD'), function (_) {\r\n\t\t\t\t\treturn _.name == 'SmtpAuthenticationType'\r\n\t\t\t\t}).checked = true;\r\n\t\t\t};\r\n\r\n\t\t\tswitch (deliveryMethodName) {\r\n\t\t\t\tcase 'Relay': // this isn't a value of SmtpDeliveryMethod, just Network with extra parameters\r\n\t\t\t\t\treturn $dl({className: 'SmtpRelaySettingsList'}, [\r\n\t\t\t\t\t\t$dt(SC.res['Extension.SMTPSettings.NetworkSettingsLabelText']),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.RelayServerLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpRelayServerBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpRelayServerHostName,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.RelayServerPortLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'number',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpRelayServerPortBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpRelayServerPort,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t\t_attributeMap: {\r\n\t\t\t\t\t\t\t\t\t\tmax: 65535,\r\n\t\t\t\t\t\t\t\t\t\tmin: 1,\r\n\t\t\t\t\t\t\t\t\t\tplaceholder: 25,\r\n\t\t\t\t\t\t\t\t\t},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'checkbox',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpRelayServerEnableSSLCheckbox',\r\n\t\t\t\t\t\t\t\t\tchecked: mailConfiguration.enableSSL,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.UseSSLLabelText']),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dt(SC.res['Extension.SMTPSettings.AuthenticationSettingsLabelText']),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'radio',\r\n\t\t\t\t\t\t\t\t\tname: 'SmtpAuthenticationType',\r\n\t\t\t\t\t\t\t\t\tvalue: 'None',\r\n\t\t\t\t\t\t\t\t\tchecked: (SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) || SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword)) && !mailConfiguration.smtpUseDefaultCredentials,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.AnonymousCredentialsLabelText']),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'radio',\r\n\t\t\t\t\t\t\t\t\tname: 'SmtpAuthenticationType',\r\n\t\t\t\t\t\t\t\t\tvalue: 'Windows',\r\n\t\t\t\t\t\t\t\t\tchecked: mailConfiguration.smtpUseDefaultCredentials,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.DefaultCredentialsLabelText']),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.NetworkTargetNameLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpAuthSPNBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpNetworkTargetName,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'radio',\r\n\t\t\t\t\t\t\t\t\tname: 'SmtpAuthenticationType',\r\n\t\t\t\t\t\t\t\t\tvalue: 'Credentials',\r\n\t\t\t\t\t\t\t\t\tchecked: !mailConfiguration.smtpUseDefaultCredentials && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword),\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.AccountCredentialsLabelText']),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.UsernameLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpAuthUsernameBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpNetworkUserName,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.PasswordLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'password',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpAuthPasswordBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpNetworkPassword,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.ConfirmPasswordLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'password',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpAuthConfirmPasswordBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpNetworkPassword,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t]);\r\n\r\n\t\t\t\tcase 'SpecifiedPickupDirectory':\r\n\t\t\t\t\treturn $input({\r\n\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\tclassName: 'SmtpPickupDirectoryLocationBox',\r\n\t\t\t\t\t\tvalue: mailConfiguration.smtpPickupDirectoryLocation,\r\n\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t});\r\n\r\n\t\t\t\tdefault: // network, iispickup\r\n\t\t\t\t\treturn null;\r\n\t\t\t}\r\n\t\t}\r\n\r\n\t\t\tSC.dialog.showModalDialog('EditMailConfiguration', {\r\n\t\t\t\ttitleResourceName: 'EditMailConfigurationPanel.Title',\r\n\t\t\t\tcontent: [\r\n\t\t\t\t\t$dl([\r\n\t\t\t\t\t\t$dt({_textResource: 'MailPanel.MailDeliveryText'}),\r\n\t\t\t\t\t\t$dd(\r\n\t\t\t\t\t\t\t['Network', 'PickupDirectoryFromIis', 'SpecifiedPickupDirectory', 'Relay'].filter(function (_) {\r\n\t\t\t\t\t\t\t\treturn !IS_CLOUD || _ == 'Network' || _ == 'Relay'\r\n\t\t\t\t\t\t\t}).map(function (_) {\r\n\t\t\t\t\t\t\t\treturn [\r\n\t\t\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\t\t\ttype: 'radio',\r\n\t\t\t\t\t\t\t\t\t\t\tname: 'MailDelivery',\r\n\t\t\t\t\t\t\t\t\t\t\tclassName: _ + 'RadioButton',\r\n\t\t\t\t\t\t\t\t\t\t\tvalue: _,\r\n\t\t\t\t\t\t\t\t\t\t\tchecked: _ == 'Relay' ? !SC.util.isNullOrEmpty(mailConfiguration.smtpRelayServerHostName) : mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod[_],\r\n\t\t\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t\t\t$span({_textResource: 'MailPanel.Smtp' + (_ == 'Network' ? 'Direct' : _) + 'RadioButtonText'}),\r\n\t\t\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t\t\tgetControlsForDeliveryMethod(_),\r\n\t\t\t\t\t\t\t\t];\r\n\t\t\t\t\t\t\t})\r\n\t\t\t\t\t\t),\r\n\t\t\t\t\t\t$dt({_textResource: 'MailPanel.DefaultFromAddressLabelText'}),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\tclassName: 'DefaultMailFromAddressBox',\r\n\t\t\t\t\t\t\t\tvalue: mailConfiguration.defaultMailFromAddress,\r\n\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dt({_textResource: 'MailPanel.DefaultToAddressLabelText'}),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$div([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\t\tclassName: 'DefaultMailToAddressBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.defaultMailToAddress,\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$button({\r\n\t\t\t\t\t\t\t\t\tclassName: 'SecondaryButton',\r\n\t\t\t\t\t\t\t\t\t_textResource: 'MailPanel.SendTestMailButtonText',\r\n\t\t\t\t\t\t\t\t\t_commandName: 'SendAdvancedTestEmail',\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t]),\r\n\t\t\t\t\t$p({className: 'ResultPanel'}),\r\n\t\t\t\t],\r\n\t\t\t\tbuttonTextResourceName: 'EditMailConfigurationPanel.ButtonText',\r\n\t\t\t\tonExecuteCommandProc: function (dialogEventArgs, dialog, closeDialogProc, setDialogErrorProc) {\r\n\t\t\t\t\tvar authenticationMethod = SC.ui.getSelectedRadioButtonValue(dialog.querySelector('.SmtpRelaySettingsList'));\r\n\r\n\t\t\t\t\tvar smtpDeliveryMethodName = SC.ui.getSelectedRadioButtonValue(dialog);\r\n\t\t\t\t\tvar useExtraNetworkSettings = false;\r\n\t\t\t\t\tif (smtpDeliveryMethodName == 'Relay') {\r\n\t\t\t\t\t\tsmtpDeliveryMethodName = 'Network'; // convert to valid SmtpDeliveryMethod value\r\n\t\t\t\t\t\tuseExtraNetworkSettings = true;\r\n\t\t\t\t\t}\r\n\r\n\t\t\t\t\tvar defaultMailFromAddress = dialog.querySelector('.DefaultMailFromAddressBox').value.trim();\r\n\t\t\t\t\tvar defaultMailToAddress = dialog.querySelector('.DefaultMailToAddressBox').value.trim();\r\n\t\t\t\t\tvar smtpRelayServerHostName = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerBox').value.trim() || null : null;\r\n\t\t\t\t\tvar smtpRelayServerPort = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerPortBox').value.trim() || null : null;\r\n\t\t\t\t\tvar enableSSL = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerEnableSSLCheckbox').checked : null;\r\n\t\t\t\t\tvar smtpPickupDirectoryLocation = smtpDeliveryMethodName == 'SpecifiedPickupDirectory' ? dialog.querySelector('.SmtpPickupDirectoryLocationBox').value.trim() || null : null;\r\n\t\t\t\t\tvar smtpUseDefaultCredentials = useExtraNetworkSettings && authenticationMethod == 'Windows' || null;\r\n\t\t\t\t\tvar smtpNetworkTargetName = useExtraNetworkSettings && authenticationMethod == 'Windows' ? dialog.querySelector('.SmtpAuthSPNBox').value.trim() || null : null;\r\n\t\t\t\t\tvar smtpNetworkUserName = useExtraNetworkSettings && authenticationMethod == 'Credentials' ? dialog.querySelector('.SmtpAuthUsernameBox').value.trim() || null : null;\r\n\t\t\t\t\tvar smtpNetworkPassword = useExtraNetworkSettings && authenticationMethod == 'Credentials' ? dialog.querySelector('.SmtpAuthPasswordBox').value.trim() || null : null;\r\n\r\n\t\t\t\t\tva",
         "datamd5" : "89c681eaf8fb01680ba06a248c645aff",
         "datammh3" : 1466396074,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "nog.net.za"
         ],
         "geolocus" : {
            "asn" : "AS328365",
            "continent" : "AF",
            "continentname" : "Africa",
            "country" : "ZA",
            "countryname" : "South Africa",
            "isineu" : "false",
            "latitude" : "-30.559482",
            "location" : "-30.559482,22.937506",
            "longitude" : "22.937506",
            "netname" : "ZANOG",
            "organization" : "ZANOG",
            "subnet" : "102.222.100.0/22"
         },
         "host" : [
            "shadowserver"
         ],
         "hostname" : [
            "shadowserver.umh.nog.net.za"
         ],
         "ip" : "102.222.100.156",
         "ipv6" : "false",
         "latitude" : "-28.9984",
         "location" : "-28.9984,23.9888",
         "longitude" : "23.9888",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Edge-connect",
         "os" : "Linux",
         "osdistribution" : "sUse",
         "osvendor" : "Linux",
         "port" : 6984,
         "product" : "Control",
         "productvendor" : "ConnectWise",
         "productversion" : "21.14.5924.8013",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "shadowserver.umh.nog.net.za"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "umh.nog.net.za"
         ],
         "subnet" : "102.222.100.0/22",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net.za"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 18.223.156.64:6984 (tcp/http) - last seen on 2024-11-07 at 02:20:39 UTC

    • IP
      18.223.156.64
      Network
      18.216.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://18.223.156.64:6984/ 200

      Reverse DNS
      ec2-18-223-156-64.us-east-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      841ef049931f2abf64cb8efe40b3361a
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      7247f7a69fe8c58679f8e1859605c9b1
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 07 Nov 2024 02:20:38 GMT
      Server: nginx
      Content-Length: 88
      Content-Type: text/html
      
      <HTML><HEAD><script>window.top.location.href='/Main_Login.asp';</script>
      </HEAD></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:20:39.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "7247f7a69fe8c58679f8e1859605c9b1",
               "bodymmh3" : -1161513703,
               "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
               "headermmh3" : -1217084163
            },
            "length" : 223
         },
         "asn" : "AS16509",
         "city" : "Columbus",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 02:20:38 GMT\r\nServer: nginx\r\nContent-Length: 88\r\nContent-Type: text/html\r\n\r\n<HTML><HEAD><script>window.top.location.href='/Main_Login.asp';</script>\n</HEAD></HTML>\n",
         "datamd5" : "841ef049931f2abf64cb8efe40b3361a",
         "datammh3" : -116911898,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AT-88-Z",
            "organization" : "Amazon Technologies Inc.",
            "subnet" : "18.216.0.0/13"
         },
         "host" : [
            "ec2-18-223-156-64"
         ],
         "hostname" : [
            "ec2-18-223-156-64.us-east-2.compute.amazonaws.com"
         ],
         "ip" : "18.223.156.64",
         "ipv6" : "false",
         "latitude" : "39.9625",
         "location" : "39.9625,-83.0061",
         "longitude" : "-83.0061",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 6984,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "ec2-18-223-156-64.us-east-2.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-east-2.compute.amazonaws.com"
         ],
         "subnet" : "18.216.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }