Report - myhelp.live/Bin/ScreenConnect.Client.application?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=

Report Overview

Submitted URL
myhelp.live/Bin/ScreenConnect.Client.application?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
IP
154.53.52.72
ASN
#40021 CONTABO
Submitted
2022-12-23 00:57:30
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-09T05:09:05Z	1.7 kB	4.4 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-09T05:09:18Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-09T05:09:49Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-09T05:09:48Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-09T11:52:10Z	341 B	797 B	93.184.220.29
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-09T05:09:13Z	606 B	127 B	52.39.94.191
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-09T10:04:36Z	3.2 kB	52 kB	34.120.237.76
myhelp.live	unknown	2022-06-19T04:16:30Z	2022-12-21T09:38:03Z	13 kB	242 kB	154.53.52.72

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2022-12-23 00:57:18	high	Client IP	154.53.52.72	ETPRO POLICY ScreenConnect - Establish Connection Attempt

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=	14 kB	2023-03-07	2024-01-22
Pretty URL myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= IP 154.53.52.72 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:27:40 Last Seen2024-01-22 13:42:35 Times Seen73 Hash 17b6e1ff0896d274f60264e1aaa36ea4 f75ed7dc2b369fe12f7f566315125e85793cc316 da082be564f3ee0024c3faf09afbb3a6f32fdff7de9c31c50e3952185f836e0b Loading...

	myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=	615 B	2023-03-07	2024-02-05
Pretty URL myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= IP 154.53.52.72 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31:35 Last Seen2024-02-05 20:41:33 Times Seen97 Hash 5f889988d08bb552f12b35e1840b74e4 5d35981fa7f3c508ce08f7de8308041acadb484f 3fdd643ad326920f69594d3e3f35a795207d9ded3d92ef2c2d750624378421c5 Loading...

	myhelp.live/Script.ashx?__Cache=f67f863a-cb6c-427e-b7b3-12bf9f4f3750	517 kB	2023-03-10	2023-03-10
Pretty URL myhelp.live/Script.ashx?__Cache=f67f863a-cb6c-427e-b7b3-12bf9f4f3750 IP 154.53.52.72 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 04:47:30 Last Seen2023-03-10 04:47:30 Times Seen1 Hash 0c6253b0a8f33e20a44cfb1f16ee74b4 3baac82e2cd6d2b8ceb0128d6fda04a286a4d7be 4f6d455309d50a37d21c887e6634475d334381d3cf536a78aedb304e79fc1b40 Loading...

	myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=	507 B	2023-03-10	2023-03-10
Pretty URL myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= IP 154.53.52.72 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 04:47:30 Last Seen2023-03-10 04:47:30 Times Seen1 Hash ee34426d79b33ff88b364c449bf31b9a bd9ea748e7830b9f6f1c376116a624a3effbc573 c890a849ae1971705eb5f5e38416f7acb63b6d1896f8b1b667c3893503a09c62 Loading...

	myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=	2.6 kB	2023-03-07	2024-02-05
Pretty URL myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= IP 154.53.52.72 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:27:40 Last Seen2024-02-05 20:41:34 Times Seen84 Hash 6ffa1fcfeee9baf3a786bed27e73e685 42596624e7cfcd16efa84dd72517c33e455205ca 608cb4e2a9f1da9f9a45e365a7373fbb4f40917b5b5ed6a6b4cd58fa68c36f82 Loading...

	myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=	44 B	2023-03-07	2024-02-05
Pretty URL myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= IP 154.53.52.72 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31:35 Last Seen2024-02-05 20:41:34 Times Seen98 Hash da06705106b9234f224ad7be4709e78e fdb4cd5a01ed43d928f175eae4644453178d01c7 a1b21336401e5f1c0c3fa29f5fbac682c3709a3d7c6564bda220f8077d7ff855 Loading...

	myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=	75 B	2023-03-07	2024-02-05
Pretty URL myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= IP 154.53.52.72 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31:35 Last Seen2024-02-05 20:41:34 Times Seen98 Hash 4ea0053564be75ebb7190361a2d0b887 c3db7a7218a2539eb56eabbe98b23bd8fb78f3f6 23c39711c9fd1194e0d77bf056fae391ba0fea97b58fa7bc23dd9ba2401d3dc6 Loading...

	myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=	9.9 kB	2023-03-07	2024-02-05
Pretty URL myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= IP 154.53.52.72 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:32:35 Last Seen2024-02-05 20:41:34 Times Seen92 Hash 0f83add687cb88365f3cbba2c15cf345 e483fc701b19d61707e649dc2d54296655d07ae5 0f61a598ce03701f6934e6aae8be8057b27776ca8a38152b3b8cd38f68f5a073 Loading...

HTTP Transactions (31)

URL IP Response Size

myhelp.live/Bin/ScreenConnect.Client.application?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=

154.53.52.72

302 Redirect

643 B

URL HTTP/1.1
myhelp.live/Bin/ScreenConnect.Client.application?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (600)
Size
643 B (643 bytes)
Hash
642a0ebd5901da49c93e40e2597f4083
a43d770ef21d4d2d34c5c5461cac988174d0d10d
65b85695bdee8bf493bb17b4b74f9760ab75f6e3df10270d407c31d9ba596b78

Detections

NIDS	Severity	Alert
suricata	high	ETPRO POLICY ScreenConnect - Establish Connection Attempt

HTTP Headers

GET /Bin/ScreenConnect.Client.application?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://myhelp.live?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Server: Microsoft-IIS/10.0
Date: Fri, 23 Dec 2022 00:57:18 GMT
Content-Length: 643

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7e300ca7d2d586dd1ca0c185ef6b0da5
3914cfd3b7aa6e1d1117bf509319479e489ed2a4
91c8810ad137faf4393f7d15f9c619c06d124a7aaebfa21290dca614db2c7757

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91C8810AD137FAF4393F7D15F9C619C06D124A7AAEBFA21290DCA614DB2C7757"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11719
Expires: Fri, 23 Dec 2022 04:12:38 GMT
Date: Fri, 23 Dec 2022 00:57:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ad598540c6639aaaa344fb3ce4f3162f
b0b9f86d50de7dc23bdc7aee2f45d79a06165afc
4e9aaff330ce0c9c11f6bb8502fe21296b1845151bace75f73908a3194d5d0a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E9AAFF330CE0C9C11F6BB8502FE21296B1845151BACE75F73908A3194D5D0A1"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14159
Expires: Fri, 23 Dec 2022 04:53:18 GMT
Date: Fri, 23 Dec 2022 00:57:19 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 23 Dec 2022 00:46:05 GMT
content-type: application/json
age: 674
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
32167242c3bbe7e45a2a865279df94a6
d03436f418ff77d50a553daa892c05e0725ba908
d5578d537296da18f3f349a98465e9fe930dca60a8ed62c183e9c9f6eb53f493

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D5578D537296DA18F3F349A98465E9FE930DCA60A8ED62C183E9C9F6EB53F493"
Last-Modified: Wed, 21 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8605
Expires: Fri, 23 Dec 2022 03:20:44 GMT
Date: Fri, 23 Dec 2022 00:57:19 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: IMFhGWSNMEPhOwNIp8tFtrIpnfiecNNdNt4JoEASnY18ltRqf4xt6V5jto9Myb3nCLJUfu5+4kK7QfswD05xyA==
x-amz-request-id: 420N9SK67TTKF878
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 23 Dec 2022 00:53:52 GMT
age: 207
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 00:57:19 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=

154.53.52.72

200 OK

7.0 kB

URL HTTP/2
myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (524), with CRLF line terminators
Size
7.0 kB (6969 bytes)
Hash
a0d300c597db4992ec416cc3d0a83674
51ef6463c0c04a103961bdfc33a2f1948b4e9bfd
0df5be0b49e3ca4f3a0582623e55b71ce2a7c0b4ba027399d3b882a0f341f575

HTTP Headers

GET /?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r= HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
cache-control: private
content-length: 6969
content-type: text/html; charset=utf-8
content-encoding: gzip
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
p3p: CP="NON CUR OUR STP STA PRE"
date: Fri, 23 Dec 2022 00:57:20 GMT
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 23 Dec 2022 00:08:02 GMT
age: 2958
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
70a7b165f99b2b8fa0dc98318a7158d7
4d924f7febab9c8fe3fe9199e8879fd6ad892575
c5e0e414c34f2f328b487ae72b21a12a1b50d952aa1a31fb6314b4e700d27e05

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1445
Cache-Control: max-age=117215
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 00:57:20 GMT
Etag: "63a41e2a-1d7"
Expires: Sat, 24 Dec 2022 09:30:55 GMT
Last-Modified: Thu, 22 Dec 2022 09:06:50 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

52.39.94.191

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.39.94.191:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jSPGQ3kSoOTzE3MwazO+Rg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pLyvRRPhr2Nlpl+XJ0kIzn0kGPA=

myhelp.live/Script.ashx?__Cache=f67f863a-cb6c-427e-b7b3-12bf9f4f3750

154.53.52.72

200 OK

94 kB

URL HTTP/2
myhelp.live/Script.ashx?__Cache=f67f863a-cb6c-427e-b7b3-12bf9f4f3750
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
ASCII text, with very long lines (34153), with CRLF line terminators
Size
94 kB (93609 bytes)
Hash
5b090b6d053c05502d5db495b32c9f67
89f3053dac71616a63d1d64d70bf9263eaf460ea
851d85a81a8abc5ac6c270e7ecaff604a8d5e145f09b239dd6f75ac7723f6420

HTTP Headers

GET /Script.ashx?__Cache=f67f863a-cb6c-427e-b7b3-12bf9f4f3750 HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=28759456
content-length: 93609
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Mon, 20 Nov 2023 21:41:36 GMT
vary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
date: Fri, 23 Dec 2022 00:57:20 GMT
X-Firefox-Spdy: h2

myhelp.live/App_Themes/SolidWithBlue/Default.css?__Cache=5b5f0cb0-ceb8-412e-b2bd-c99d8d919d37

154.53.52.72

200 OK

107 kB

URL HTTP/2
myhelp.live/App_Themes/SolidWithBlue/Default.css?__Cache=5b5f0cb0-ceb8-412e-b2bd-c99d8d919d37
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
ASCII text, with very long lines (27376), with CRLF line terminators
Size
107 kB (106730 bytes)
Hash
981df5f4f058926cace7e704909de67a
acfc96c83b6132973b42292ae7bf4bede05cd95b
748304167cf0614e0be06f4d4232a5f973b6a470d34c505f9b9122cad14685e7

HTTP Headers

GET /App_Themes/SolidWithBlue/Default.css?__Cache=5b5f0cb0-ceb8-412e-b2bd-c99d8d919d37 HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=28571390
content-length: 106730
content-type: text/css; charset=utf-8
content-encoding: gzip
expires: Sat, 18 Nov 2023 17:27:11 GMT
vary: Accept-Encoding
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
date: Fri, 23 Dec 2022 00:57:20 GMT
X-Firefox-Spdy: h2

myhelp.live/Images/Extras.svg

154.53.52.72

200 OK

322 B

URL HTTP/2
myhelp.live/Images/Extras.svg
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (322), with no line terminators
Size
322 B (322 bytes)
Hash
813c72f0a4741978669871e3800d5279
ae5e036f992577f8afca3d99a352f44a217c2c2a
8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061

HTTP Headers

GET /Images/Extras.svg HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public
content-length: 322
content-type: image/svg+xml
expires: Fri, 23 Dec 2022 21:51:49 GMT
last-modified: Fri, 01 Jul 2022 22:23:14 GMT
accept-ranges: bytes
etag: "1D88D9927857500"
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
date: Fri, 23 Dec 2022 00:57:21 GMT
X-Firefox-Spdy: h2

myhelp.live/Images/WaffleIcon.svg

154.53.52.72

200 OK

821 B

URL HTTP/2
myhelp.live/Images/WaffleIcon.svg
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (821), with no line terminators
Size
821 B (821 bytes)
Hash
2599340bf60ee89b13e6b91beefe1199
4e0babcd7fdcabc1759ed0f130e06972340c5127
5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d

HTTP Headers

GET /Images/WaffleIcon.svg HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public
content-length: 821
content-type: image/svg+xml
expires: Fri, 23 Dec 2022 21:51:49 GMT
last-modified: Fri, 01 Jul 2022 22:23:14 GMT
accept-ranges: bytes
etag: "1D88D9927857500"
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
date: Fri, 23 Dec 2022 00:57:21 GMT
X-Firefox-Spdy: h2

myhelp.live/Services/PageService.ashx/GetGuestSessionInfo

154.53.52.72

200 OK

105 B

URL HTTP/2
myhelp.live/Services/PageService.ashx/GetGuestSessionInfo
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
JSON data\012- , ASCII text, with no line terminators
Size
105 B (105 bytes)
Hash
3dda5cdbc2f78651ec8eb4a7009f6c2d
536a6e38412bbf74344207c1561fc2b62a72425d
e5e7be163c6a289f207a911bbe664bebe23517d3bdd9ed451b8a7d9e3bd8c805

HTTP Headers

POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: bvgA5y3rXqBcEDsEr9QpMaG7JgdJLstdxZ66itpkKv0BAACXiODnbbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 9
Origin: https://myhelp.live
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://myhelp.live
access-control-allow-credentials: true
date: Fri, 23 Dec 2022 00:57:21 GMT
X-Firefox-Spdy: h2

myhelp.live/Images/ActivityIndicator.gif

154.53.52.72

200 OK

28 kB

URL HTTP/2
myhelp.live/Images/ActivityIndicator.gif
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
GIF image data, version 89a, 200 x 200\012- data
Size
28 kB (27503 bytes)
Hash
c63792b958d231654ab54542fea871db
c21cfffa5cbd2a7c94076324fe28c4596df92e0c
9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a

HTTP Headers

GET /Images/ActivityIndicator.gif HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myhelp.live/App_Themes/SolidWithBlue/Default.css?__Cache=5b5f0cb0-ceb8-412e-b2bd-c99d8d919d37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public
content-length: 27503
content-type: image/gif
expires: Fri, 23 Dec 2022 21:51:49 GMT
last-modified: Fri, 01 Jul 2022 22:23:14 GMT
accept-ranges: bytes
etag: "1D88D9927857500"
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
date: Fri, 23 Dec 2022 00:57:21 GMT
X-Firefox-Spdy: h2

myhelp.live/FavIcon.axd?__Cache=3a336089-791c-4e54-a130-20692f6f6ad4

154.53.52.72

200 OK

38 B

URL HTTP/2
myhelp.live/FavIcon.axd?__Cache=3a336089-791c-4e54-a130-20692f6f6ad4
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
data
Size
38 B (38 bytes)
Hash
a3ddc69ead48d5e01cf0141dd3e20abe
9a7a966e9735e9611fadbb9f7b14355769143663
2206a9c2bb7c1863d52caacd4d3926b48a9f21127901747953d05b1c447b24ae

HTTP Headers

GET /FavIcon.axd?__Cache=3a336089-791c-4e54-a130-20692f6f6ad4 HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=28571391
content-length: 38
content-type: image/vnd.microsoft.icon
expires: Sat, 18 Nov 2023 17:27:13 GMT
vary: Accept-Encoding
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
date: Fri, 23 Dec 2022 00:57:21 GMT
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fc328f2e44d4ac962c03be665dbf6436
7ac1bb5dd0d42c9cb2e6a67b06b55934190691fe
7d7ced4a7da10564449ddec77f05d85557a2b2f7e8fe2a7d15541c7b52aee928

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10667
Expires: Fri, 23 Dec 2022 03:55:09 GMT
Date: Fri, 23 Dec 2022 00:57:22 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fc328f2e44d4ac962c03be665dbf6436
7ac1bb5dd0d42c9cb2e6a67b06b55934190691fe
7d7ced4a7da10564449ddec77f05d85557a2b2f7e8fe2a7d15541c7b52aee928

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10667
Expires: Fri, 23 Dec 2022 03:55:09 GMT
Date: Fri, 23 Dec 2022 00:57:22 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a06f1b4-7136-4077-b835-37444f8dfbc2.jpeg

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a06f1b4-7136-4077-b835-37444f8dfbc2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8838 bytes)
Hash
88dede3fbbab789a953b46f7abd99bec
fdd5a2c09ec16ffccd33bde9f503171607b65653
a45d65e7e99c7eca94d2ded3741d1823a8ff1358065021e837b65247fd0e96ce

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a06f1b4-7136-4077-b835-37444f8dfbc2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8838
x-amzn-requestid: 0dc7c87e-41a8-4bb9-94d3-fe58274100c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dkUhqFaxoAMFk-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a4ce0a-58fd6c175081eb4b11663189;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iI3L3JYjnY8hPns-f2AQwmQTZgsnPsLUFHPF4GyNC0D-JdYWsdCm1A==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 21:49:55 GMT
age: 11247
etag: "fdd5a2c09ec16ffccd33bde9f503171607b65653"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef779b-50c4-426a-bb0e-48c0920e42f4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.6 kB (5642 bytes)
Hash
fcdd5fc33823bcbfee082a3c0f2b083a
ed38fa97bee58621ef44a2ea6fbe4c291a12e12e
0ef1916483458d2c629077614f5ba5ea268c85679e60e8e14c7d4ca4993b674a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef779b-50c4-426a-bb0e-48c0920e42f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5642
x-amzn-requestid: e4e58ace-9158-4419-b3da-ed0e5502fdd7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dVJviFUAoAMFifg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ebcc9-1c38199e663a289b775de5df;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 07:10:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mrKTso9Ew9gzmJSilPJfvh1VkrxZyoDiTvakJOn7exvwnhfXHd_Srw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 05:59:56 GMT
age: 68246
etag: "ed38fa97bee58621ef44a2ea6fbe4c291a12e12e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d5629e-fad4-47f4-b056-10a0b49847bf.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.9 kB (7938 bytes)
Hash
2bbbb7eaaa4b72573f00472962e147b9
617524daae76010761f7c1a91ef7d820f3bfa18d
8bd70123b979f4fa9b0dfaac49a8fe5a13b7f61ea1b3355b66c2f4b9450f42ff

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d5629e-fad4-47f4-b056-10a0b49847bf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7938
x-amzn-requestid: c9915489-5c21-4200-ad77-ce1bcc1094ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: diJhHErEIAMF_pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3efa0-50147a2c3de345c0015d4ecc;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 05:48:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UqAJpml3Tp2OHPiH1BKm7xZQTZ_mzwjjYxnArqCgcKQ0CJYwLUEgHA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 08:03:23 GMT
age: 60839
etag: "617524daae76010761f7c1a91ef7d820f3bfa18d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F169797b0-6e7c-465c-beb9-7a6d7fececc1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5670 bytes)
Hash
399e3ad7724965850c99ea3fc5e8bb45
fcf47ddb70d7861aafa57164182185b606d1b0c6
7d754b6de71e3f0e08eee4a657a12e402d04f68ae4f1771cd3d3b755837443d2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F169797b0-6e7c-465c-beb9-7a6d7fececc1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5670
x-amzn-requestid: bd33e45f-6da2-4885-a098-0e2310f1842d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhfOFExroAMFijg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3abf3-0e3675b0071c0a041ab7c3cf;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 00:59:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 05BFfdjEXh8VlWjIiuug8_Jz9beocfVDO7gsKjrXcAQQqEcZhdk3Pw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 12:28:21 GMT
age: 44941
etag: "fcf47ddb70d7861aafa57164182185b606d1b0c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83469489-464a-4345-8fc1-3aab3854de0a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8508 bytes)
Hash
86c588ce8a5cde9b24e6f80343cf7c14
014622b9d2cac3527649ed02a7615897d08e5fe8
2ca9290c5c7ce52bd26e94c37c73a3e85a3cd22f80c39f447ea6fa0eb83f1766

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83469489-464a-4345-8fc1-3aab3854de0a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8508
x-amzn-requestid: 6786c31f-0a15-4672-891b-b3f5fa95be3b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dUnBMGc6IAMF69A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e853a-4df873cb385b2aa700ea6aba;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 03:12:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: zMcUnolIzg5W-u3NO-59k78GrfqJWNUYD2Gqx0FSv7lQ-o2IJ_6EOw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 01:57:00 GMT
age: 82822
etag: "014622b9d2cac3527649ed02a7615897d08e5fe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba282dd4-f1e4-4f5c-9a46-b6e71aa327de.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8732 bytes)
Hash
e49802d7e560d6e9b5d17111d531af4d
c2c523d207935363931aa17cd9aaabb9a48c28a0
255ac832533c579d57dac6adc330f83d39de222b3496277b2394afc15fe74535

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba282dd4-f1e4-4f5c-9a46-b6e71aa327de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8732
x-amzn-requestid: 25cbd9e6-ad97-4369-a02c-e740030b437c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: defNLECQIAMFiQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a278ba-4e1a2cd801c389584e320ffe;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: msS0IMqy7kSdOGD3i1aqSjALrtrypvo0EFsqYOyZNo_hmCaFKWn6Uw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1d0860167e2100a6d1cd9c0213c2b8e8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 04:23:27 GMT
age: 74035
etag: "c2c523d207935363931aa17cd9aaabb9a48c28a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

myhelp.live/Services/PageService.ashx/GetGuestSessionInfo

154.53.52.72

200 OK

105 B

URL HTTP/2
myhelp.live/Services/PageService.ashx/GetGuestSessionInfo
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
JSON data\012- , ASCII text, with no line terminators
Size
105 B (105 bytes)
Hash
f4df970aaf32703a6f0f41f0ddc67d71
bb7820496c0fa68b95b4776d397a2be4c924339a
376311dae5c9b6c2dc9045f6ab34c86d97979dc612a49a844e12cf2fdea8973a

HTTP Headers

POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: bvgA5y3rXqBcEDsEr9QpMaG7JgdJLstdxZ66itpkKv0BAACXiODnbbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 17
Origin: https://myhelp.live
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://myhelp.live
access-control-allow-credentials: true
date: Fri, 23 Dec 2022 00:57:22 GMT
X-Firefox-Spdy: h2

myhelp.live/Services/PageService.ashx/GetGuestSessionInfo

154.53.52.72

200 OK

105 B

URL HTTP/2
myhelp.live/Services/PageService.ashx/GetGuestSessionInfo
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
JSON data\012- , ASCII text, with no line terminators
Size
105 B (105 bytes)
Hash
ddfcc0b1b384bf45d1df4733c76dbbc9
93d84bcd90b628d2e52c196b204edb8abd20c6fb
4b9cc67ad84ab06bfdafea4461cb82b739ae07feb2dc77c75db195424672294e

HTTP Headers

POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: bvgA5y3rXqBcEDsEr9QpMaG7JgdJLstdxZ66itpkKv0BAACXiODnbbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 17
Origin: https://myhelp.live
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://myhelp.live
access-control-allow-credentials: true
date: Fri, 23 Dec 2022 00:57:23 GMT
X-Firefox-Spdy: h2

myhelp.live/Services/PageService.ashx/GetGuestSessionInfo

154.53.52.72

200 OK

105 B

URL HTTP/2
myhelp.live/Services/PageService.ashx/GetGuestSessionInfo
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
JSON data\012- , ASCII text, with no line terminators
Size
105 B (105 bytes)
Hash
9dea05f5618a7058133f51f060cef341
0c4df231ece2b85f7a357467b23db02bb799ad9c
6e2a0e3abcf378004b1c2b8b1373c0be380202fe37f5697d8ba50e883bcf6bd6

HTTP Headers

POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: bvgA5y3rXqBcEDsEr9QpMaG7JgdJLstdxZ66itpkKv0BAACXiODnbbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 17
Origin: https://myhelp.live
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://myhelp.live
access-control-allow-credentials: true
date: Fri, 23 Dec 2022 00:57:24 GMT
X-Firefox-Spdy: h2

myhelp.live/Services/PageService.ashx/GetGuestSessionInfo

154.53.52.72

200 OK

105 B

URL HTTP/2
myhelp.live/Services/PageService.ashx/GetGuestSessionInfo
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
JSON data\012- , ASCII text, with no line terminators
Size
105 B (105 bytes)
Hash
756c37aa568877856f2d3c902844e188
a0ea3a49f96de0751b7eb7e500088f0ff692cfb4
47461024b8eb19714d4fe1f761aa3fff74cd2b91cc8197e60a94c249fc926c49

HTTP Headers

POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: bvgA5y3rXqBcEDsEr9QpMaG7JgdJLstdxZ66itpkKv0BAACXiODnbbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 17
Origin: https://myhelp.live
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://myhelp.live
access-control-allow-credentials: true
date: Fri, 23 Dec 2022 00:57:25 GMT
X-Firefox-Spdy: h2

myhelp.live/Services/PageService.ashx/GetGuestSessionInfo

154.53.52.72

200 OK

105 B

URL HTTP/2
myhelp.live/Services/PageService.ashx/GetGuestSessionInfo
IP
154.53.52.72:0
ASN
#40021 CONTABO

File type
JSON data\012- , ASCII text, with no line terminators
Size
105 B (105 bytes)
Hash
61309d70db67e5b2afe0d0398daf1c7d
43781015cd1ceb8e29c24cb179d6599f0a0dc3b0
a32b2131a558170473161ac9d5708f7b5dd74c2c3b7a07c93740fddc99c6f394

HTTP Headers

POST /Services/PageService.ashx/GetGuestSessionInfo HTTP/1.1
Host: myhelp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Anti-Forgery-Token: bvgA5y3rXqBcEDsEr9QpMaG7JgdJLstdxZ66itpkKv0BAACXiODnbbYtQg==
X-Unauthorized-Status-Code: 403
Content-Length: 17
Origin: https://myhelp.live
Connection: keep-alive
Referer: https://myhelp.live/?h=myhelp.live&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDhDQhfG30F/JQiDoxlOeIikeABu3E86w2QY1sb3ds6spMD4AWEo0QXhQtGb5s7N3h5esao4XJDJqBpCPJLMRHSX5gzEYwR0mUY/yMw7IrGzczNR4dtQ4VlB4VRk1YLtFn5FcOqUbyU1ehkCSfC9bRlf/FHRbVK36bBfcaAyW/bM7MpPm9DlHcoYRuB8R0E11eHIzn2KPwniE8kMGcXMUv5Z1+8iWkdtaez6JP+e/JEAP5dqXZAKoMjBVn3vGnJ88td9hg3yMyKI7lPIKP6uK0nRmOwunHXFMHEz/Ltl/KHcG5l96KSEd5VrVmDV58WUqG/BDuIlcHsZ2ZfnW95tPzB&s=898dfdee-ccaf-42fb-8f6f-88a06dab3167&i=Untitled%20Session&e=Support&y=Guest&r=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 105
content-type: application/json; charset=utf-8
expires: -1
server: ScreenConnect/22.6.8722.8249-992313075 Microsoft-HTTPAPI/2.0
access-control-allow-origin: https://myhelp.live
access-control-allow-credentials: true
date: Fri, 23 Dec 2022 00:57:26 GMT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations