r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 234b80a5a27f3d377e322e680413479d
3da8ba535ec19898f5b83ece48cd4038ac2bf557
370104df5dd8f739601a4be42ae41bb92f365dcf585823a3c14733f7c394e926
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "370104DF5DD8F739601A4BE42AE41BB92F365DCF585823A3C14733F7C394E926"
Last-Modified: Sun, 12 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9600
Expires: Tue, 14 Mar 2023 23:59:14 GMT
Date: Tue, 14 Mar 2023 21:19:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3fe71d20fae0ef9598de076d7c898ee5
8217796b8c261e184e11147a43a34dc28d723e8b
8f4124c1b2ae90fdec229e26dc0f2e8f4e9ace6011baa2cbd9bef884188c8fee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F4124C1B2AE90FDEC229E26DC0F2E8F4E9ACE6011BAA2CBD9BEF884188C8FEE"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15209
Expires: Wed, 15 Mar 2023 01:32:43 GMT
Date: Tue, 14 Mar 2023 21:19:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 14 Mar 2023 21:14:15 GMT
content-type: application/json
age: 299
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8b1778005daa3ea807573992adbd0452
4cf2aaf44073506371c1e21970a18b9eab00622f
5f74233b9cc53b0ba6149fce51f6b31c2edb892b0a95b48e66b15ee9f59525ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F74233B9CC53B0BA6149FCE51F6B31C2EDB892B0A95B48E66B15EE9F59525AD"
Last-Modified: Sun, 12 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2883
Expires: Tue, 14 Mar 2023 22:07:17 GMT
Date: Tue, 14 Mar 2023 21:19:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CqROFNL4d+zq2ZyRAzvPCCdRZOGphBL6G7ddrWk+6dX2b+rqVMuKoorlZkFZXaY+yil39rkJXA8=
x-amz-request-id: 3TJM9J6M5RHBZG7Y
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 14 Mar 2023 20:20:42 GMT
age: 3512
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/
207.180.212.249302 Found 0 B IP 207.180.212.249:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata low ET INFO HTTP Request to a *.pw domain
GET / HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 14 Mar 2023 21:19:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: ppwp_wp_session=afc98e2b92f14e725f13174abe59875b%7C%7C1678830554%7C%7C1678830194; expires=Tue, 14-Mar-2023 21:49:14 GMT; Max-Age=1800; path=/
X-Redirect-By: WordPress
Location: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
X-Powered-By: PHP/7.4.33, PleskLin
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:14 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cf387050ec98aca78545cfa5d1043942
7b2ceb13208483eebe84e271b5f0c16b5c1c2b1a
cf66ea6c027408f017d61acb86f0a3a7d165f353b454282f5119e7f57b74f6ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CF66EA6C027408F017D61ACB86F0A3A7D165F353B454282F5119E7F57B74F6EF"
Last-Modified: Tue, 14 Mar 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21528
Expires: Wed, 15 Mar 2023 03:18:03 GMT
Date: Tue, 14 Mar 2023 21:19:15 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, ETag, Backoff, Expires, Alert, Pragma, Cache-Control, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 14 Mar 2023 21:06:48 GMT
age: 747
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fc4a4ceaf4ff1530bd1678221e3ab96b
25cbfa3ed3a3ffa3958b9c5d842879f8f458afd4
89c6e447413c88858dfcb92639e614ceb678f2897e4182e70dab2e445565bc18
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C6E447413C88858DFCB92639E614CEB678F2897E4182E70DAB2E445565BC18"
Last-Modified: Tue, 14 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10867
Expires: Wed, 15 Mar 2023 00:20:22 GMT
Date: Tue, 14 Mar 2023 21:19:15 GMT
Connection: keep-alive
push.services.mozilla.com/
52.88.143.102101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.88.143.102:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cm4Nbk7iXL9ZyHk9oCcIfw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5fifwPk1DuiWE1HwitYylEf1P2I=
kb.cloudhelpdesk.pw/wp-admin/css/l10n.min.css?ver=5.8.6
207.180.212.249200 OK 2.1 kB URL HTTP/2 kb.cloudhelpdesk.pw/wp-admin/css/l10n.min.css?ver=5.8.6
IP 207.180.212.249:0
File type ASCII text, with very long lines (2442)
Hash 61da01b84e55c0c577c55f8fbb29d01b
61142d4c9fd4cdfcef621d76a0bb4fa59c6486fd
b49a543edfafc03526ab1c638f1f27a00e31a7980b8ef8147d04af368e223eb3
GET /wp-admin/css/l10n.min.css?ver=5.8.6 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: text/css
last-modified: Thu, 13 Dec 2018 11:58:11 GMT
etag: W/"5c124953-9ad"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de
207.180.212.249200 OK 30 kB URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de
IP 207.180.212.249:0
File type ASCII text, with very long lines (5405)
Hash 51b11146f3d33bba71f443b869bdb814
76c65aa2b2882097380f1c5c264174f126327b28
da5bb22e74abf539272b31eeaa57d6a86764131602d2fe4bf535aad9bfe3f503
GET /wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Sat, 31 Jul 2021 17:53:49 GMT
etag: W/"61058e2d-1540"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
207.180.212.249200 OK 32 kB URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 207.180.212.249:0
File type ASCII text, with very long lines (65447)
Hash bc1af734c5e46b0a8e0fe7ee9cc01516
79df09a2164b8d398b92d0e4e58b4a4d7457a99b
90c2fc0b3f16727383ff1f06e611a7256451259edbc27037eae5fbe329af6e5b
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Sat, 31 Jul 2021 17:53:49 GMT
etag: W/"61058e2d-15db1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11529
Expires: Wed, 15 Mar 2023 00:31:25 GMT
Date: Tue, 14 Mar 2023 21:19:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11529
Expires: Wed, 15 Mar 2023 00:31:25 GMT
Date: Tue, 14 Mar 2023 21:19:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11529
Expires: Wed, 15 Mar 2023 00:31:25 GMT
Date: Tue, 14 Mar 2023 21:19:16 GMT
Connection: keep-alive
kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
207.180.212.249200 OK 5.2 kB URL HTTP/2 kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
IP 207.180.212.249:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 10179d23a27eac5685fe8504d91a0fb8
6ac9e766fa58c16c4fb87d671993dba275b18bd2
41d5f4a6338f5b045d4077ded90ffed967c30c86e6e06132f6f6b45604e2e756
GET /wp-login.php?redirect_to=%2F HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; expires=Tue, 14-Mar-2023 21:49:15 GMT; Max-Age=1800; path=/
wordpress_test_cookie=WP%20Cookie%20check; path=/; secure
x-frame-options: SAMEORIGIN
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc20f2b31-8a32-4e66-bba7-e76e1c14f5ce.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc20f2b31-8a32-4e66-bba7-e76e1c14f5ce.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dd8a4e29260d209803408596cb286f8f
20f6796c0c7064542cc8eefe138076d16d66e8d8
54a328e054b23ddbf531b69a7c5bb817704c0dd98bc7625c9571df19df982a17
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc20f2b31-8a32-4e66-bba7-e76e1c14f5ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8091
x-amzn-requestid: 7e6e055a-de20-4f2f-8f76-2fe57747ed08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgDFEMoAMFXIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-1e932e3a10bd39d630310c65;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 8PtI7M0lBQx0BzzkLgbxlRJU-tGNlPtAI-lv-8TLbh7XKMbMOAAw9Q==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Mar 2023 21:48:49 GMT
age: 84627
etag: "20f6796c0c7064542cc8eefe138076d16d66e8d8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-admin/css/forms.min.css?ver=5.8.6
207.180.212.249200 OK 11 kB URL HTTP/2 kb.cloudhelpdesk.pw/wp-admin/css/forms.min.css?ver=5.8.6
IP 207.180.212.249:0
File type ASCII text, with very long lines (25326)
Hash 12ee2cfea1338b78c1768477d4ccf728
eaa521a78944d68d3fa03c81a8d4c5a43ded7cc1
3544980506d3dceebf71b8e277e80f189a81f02769fed8c653b24a69314bee1c
GET /wp-admin/css/forms.min.css?ver=5.8.6 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: text/css
last-modified: Sat, 31 Jul 2021 17:53:48 GMT
etag: W/"61058e2c-6311"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash be71491cee9b47dc3ffb23b4fdff25b3
79c7d22c8df6d305f46c5779ccb9f25169d4d111
e785896e5840fb901ddd0118bef3ccad6b59a96d8eef0e8ccd9c95a3c261ba45
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8487
x-amzn-requestid: 92381f1a-0140-47e9-a971-594a7de36c3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BkEcBGizoAMFgOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640b1ab3-1a54b65a5d7083e62dcb85ab;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 11:55:31 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: w_13YsBBteASlPvTrgLhnI-QiuUjEcR9q-bADLbCRl6B-uwcPS3TQA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 c5c7edc18be1805f007e0576da02e554.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Mar 2023 22:59:58 GMT
age: 80358
etag: "79c7d22c8df6d305f46c5779ccb9f25169d4d111"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26521ff6-85cb-4f66-a570-c1c161a5b9f5.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26521ff6-85cb-4f66-a570-c1c161a5b9f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93e1b34f4dbbd7b8215af242107281df
91fd7a5a7a2e805cb355705e2fb1e0b91401db0b
e1bd756029248ccd01f1ac240a4a07a2f15e15d6624a6a660a9126767dd6056a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26521ff6-85cb-4f66-a570-c1c161a5b9f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9203
x-amzn-requestid: 53d1e94f-178f-449d-820e-20db4c52d766
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFE7foAMFdcA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-23789aa8567f8c661bea3fb4;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: xSuHAVm51P01HQ6m14PMrGXKy79d1G6Q7rb0BKFox1Tk5SCcsF0v0w==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1d000d0dfe9d69b4983f619fdc5499d6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Mar 2023 22:05:15 GMT
age: 83641
etag: "91fd7a5a7a2e805cb355705e2fb1e0b91401db0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07347a5f-4c35-4f53-a77d-4ca5883b42b1.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07347a5f-4c35-4f53-a77d-4ca5883b42b1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7576ea71a52cc84be114c4ca5c1a101
ba18fe39a596c12cafa2aaaa16c65061a4ecb55f
6d1171e21c14d5827c495ab63d2fd14f573aad8cfdfa45b81e646052cb8d819d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07347a5f-4c35-4f53-a77d-4ca5883b42b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8798
x-amzn-requestid: a76ce81a-fe2c-4fb5-89f5-8a466ee83256
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSwnG0sIAMFmFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9803-2af4e3026224b91f556feec3;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:39:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: UkD87MvAJrPqVef87nqeb9gRC5i1lsKB4A7qeYBFrK0QQnDFe3a-Vw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6af3b573d8970d5db2a4d03354335b84.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Mar 2023 21:48:59 GMT
age: 84617
etag: "ba18fe39a596c12cafa2aaaa16c65061a4ecb55f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 207.180.212.249:0
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Sat, 31 Jul 2021 17:53:49 GMT
etag: W/"61058e2d-4056"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/underscore.min.js?ver=1.13.1
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/underscore.min.js?ver=1.13.1
IP 207.180.212.249:0
GET /wp-includes/js/underscore.min.js?ver=1.13.1 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Sat, 31 Jul 2021 17:53:49 GMT
etag: W/"61058e2d-4a84"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/css/buttons.min.css?ver=5.8.6
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/css/buttons.min.css?ver=5.8.6
IP 207.180.212.249:0
GET /wp-includes/css/buttons.min.css?ver=5.8.6 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: text/css
last-modified: Tue, 16 Mar 2021 12:01:07 GMT
etag: W/"60509e03-16de"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-admin/css/login.min.css?ver=5.8.6
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-admin/css/login.min.css?ver=5.8.6
IP 207.180.212.249:0
GET /wp-admin/css/login.min.css?ver=5.8.6 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: text/css
last-modified: Sat, 31 Jul 2021 17:53:48 GMT
etag: W/"61058e2c-1654"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/zxcvbn-async.min.js?ver=1.0
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/zxcvbn-async.min.js?ver=1.0
IP 207.180.212.249:0
GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Tue, 16 Mar 2021 12:01:06 GMT
etag: W/"60509e02-15f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79
IP 207.180.212.249:0
GET /wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Sat, 31 Jul 2021 17:53:49 GMT
etag: W/"61058e2d-268a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/css/dashicons.min.css?ver=5.8.6
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/css/dashicons.min.css?ver=5.8.6
IP 207.180.212.249:0
GET /wp-includes/css/dashicons.min.css?ver=5.8.6 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: text/css
last-modified: Thu, 15 Apr 2021 23:03:01 GMT
etag: W/"6078c625-e688"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 207.180.212.249:0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Thu, 21 Jan 2021 11:21:13 GMT
etag: W/"600963a9-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/wp-util.min.js?ver=5.8.6
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/wp-util.min.js?ver=5.8.6
IP 207.180.212.249:0
GET /wp-includes/js/wp-util.min.js?ver=5.8.6 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Sat, 31 Jul 2021 17:53:49 GMT
etag: W/"61058e2d-53c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
IP 207.180.212.249:0
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Sat, 31 Jul 2021 17:53:49 GMT
etag: W/"61058e2d-1906"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-admin/js/password-strength-meter.min.js?ver=5.8.6
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-admin/js/password-strength-meter.min.js?ver=5.8.6
IP 207.180.212.249:0
GET /wp-admin/js/password-strength-meter.min.js?ver=5.8.6 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Tue, 16 Mar 2021 12:01:05 GMT
etag: W/"60509e01-463"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
kb.cloudhelpdesk.pw/wp-admin/js/user-profile.min.js?ver=5.8.6
207.180.212.249200 OK 0 B URL HTTP/2 kb.cloudhelpdesk.pw/wp-admin/js/user-profile.min.js?ver=5.8.6
IP 207.180.212.249:0
GET /wp-admin/js/user-profile.min.js?ver=5.8.6 HTTP/1.1
Host: kb.cloudhelpdesk.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kb.cloudhelpdesk.pw/wp-login.php?redirect_to=%2F
Connection: keep-alive
Cookie: ppwp_wp_session=d53aafa7204ed42e5628866cb9734b1e%7C%7C1678830555%7C%7C1678830195; wordpress_test_cookie=WP%20Cookie%20check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 14 Mar 2023 21:19:15 GMT
content-type: application/javascript
last-modified: Sat, 31 Jul 2021 17:53:48 GMT
etag: W/"61058e2c-17c0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2