firefox.settings.services.mozilla.com/v1/
54.230.111.7200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 54.230.111.7:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 14:47:16 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kZjI8GSwT4JLqwo-WtVQVcSSMJhHDar5lvH5dP2w-pM3i1y8vidGZg==
Age: 3038
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5788
Expires: Wed, 05 Oct 2022 17:14:22 GMT
Date: Wed, 05 Oct 2022 15:37:54 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
54.230.111.14200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 54.230.111.14:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:33 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OtgDE6snjtz6T8ytUxi7V4PNqiiaOq2x4Sz5n1hWXrT9-ehdeydZWw==
age: 41722
X-Firefox-Spdy: h2
xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
66.29.146.165301 Moved Permanently 707 B URL HTTP/1.1 xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
IP 66.29.146.165:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 05 Oct 2022 15:37:54 GMT
server: LiteSpeed
location: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
x-turbo-charged-by: LiteSpeed
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 15:37:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 63c7bcd1df6fc368f734fbe475672005
e7a23eb1f697cd6e9b07bdca46d6e92e0cf9b435
904bbef17a8616c9b6754efbd55030d2f60d4e97d3b1126375119e75178c8217
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 15:37:54 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 16:33:12 GMT
Expires: Tue, 11 Oct 2022 16:33:11 GMT
Etag: "e7a23eb1f697cd6e9b07bdca46d6e92e0cf9b435"
Cache-Control: max-age=521116,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75573dc559f3b4e8-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.7200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 54.230.111.7:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Wed, 05 Oct 2022 15:30:28 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 05 Oct 2022 15:46:42 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9dUeAIsXeRqJimbFqpGSzPD6uye2HVsPBVyfVmr_msQof1tTjeNYHQ==
Age: 501
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6152
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:37:55 GMT
Last-Modified: Wed, 05 Oct 2022 13:55:23 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.86.38.2101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.86.38.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /Lhp4YU9CG/P8O2UJxXGBA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QL2MGTtu8HPKIl5uw8Jeu8eDfdE=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4777
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:37:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4777
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:37:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4777
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:37:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4777
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:37:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4777
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:37:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6676f255-40f8-4d3e-b916-22a5c631e767.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6676f255-40f8-4d3e-b916-22a5c631e767.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9e2e357b3a14cd7093c5911e469a23e1
31af76c6273aa93841eaf92333e4eccb2113ad2a
04557adc8a49fbaced98afcab4009411b6f0fb3373992d1f65311ac77be582bc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6676f255-40f8-4d3e-b916-22a5c631e767.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5679
x-amzn-requestid: ec6b8635-01f5-414c-8981-d0c9e279a7ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1F9TIAMFa1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-59f0e9155c32cb5553f5f2a7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tItmts5cTDvJvTHeRdrb6IwKfr4QTjx7K3773J3seH5eQblRSlnucA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:42:34 GMT
age: 64522
etag: "31af76c6273aa93841eaf92333e4eccb2113ad2a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 229c99cfb655a8c9f1a22de69fdff73c
6b5db8fbfb56f083d54b13e7660d0e4bc866aa00
f4099e9153c3dc481add95b0f24dbb8f6d65cc74ad5631d9cb6c6f2a0351843d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7021
x-amzn-requestid: 2e30bdac-360e-4d0a-8bb7-c3144e074abe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8ucHb1oAMFjYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7f5-18ba6bc50cb32b1e14c882bd;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Sd2_YDHr3j7ym7wfFyQh9kg8FP-Et2nJUOo1v_TNbI3PvpzEY5KJ2Q==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:07:19 GMT
age: 63037
etag: "6b5db8fbfb56f083d54b13e7660d0e4bc866aa00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 07:29:32 GMT
age: 29304
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
34.120.237.76200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d7d7df8d4c440f9db445c3d99e818d6
612b6dbd4ba895c167964ff7e6d9263013b52b0a
bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3585
x-amzn-requestid: ccb6f0c8-4d9b-48b8-aaf6-16781dc4c86b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaHFlEcFoAMFS3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a5223-5c9276c873efee993ba54667;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 03:08:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: T8m1q2L45TWDVRBa-R2W70yq9BauBK3G4IX54AGIxdRhG736T974kg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:05:29 GMT
age: 41547
etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1de7c17a0ba9295135e7f8b490b6a8d3
70e8d1589f3daf71378965dd197934e220fb6aa4
ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8926
x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1GSbIAMFTiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:42:34 GMT
age: 64522
etag: "70e8d1589f3daf71378965dd197934e220fb6aa4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3257b782efae9b64e6e18a547866ec50
4daf0c001e86af8477fb097e8ca932edb8e5f981
899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5832
x-amzn-requestid: c4427edd-3d71-47d0-a2d3-b3bfed089535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1FuUoAMFhBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-46ddff150da4141d23fc0d8a;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: WWClzLGprno--c75q63i1TFi8oBEdAYW-J4lCk9V8IELQXe6q0A05A==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:42:34 GMT
age: 64522
etag: "4daf0c001e86af8477fb097e8ca932edb8e5f981"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:37:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:37:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?key=AIzaSyDKbHmwzL20wAxDfLRnTHeJ0I8uAq_hU_Y&ver=6.0.2
142.250.74.10200 OK 54 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyDKbHmwzL20wAxDfLRnTHeJ0I8uAq_hU_Y&ver=6.0.2
IP 142.250.74.10:0
File type ASCII text, with very long lines (2456)
Hash 7136d5af0a80b9daa92715b77e2a851b
22bf7c77e00c9cd3aefc8a564d0e29294e8e14db
191f0a578551443dfde4a6e4a858b00ae0835f5d3c1ec263aac3913e80ac0418
GET /maps/api/js?key=AIzaSyDKbHmwzL20wAxDfLRnTHeJ0I8uAq_hU_Y&ver=6.0.2 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Wed, 05 Oct 2022 15:37:56 GMT
expires: Wed, 05 Oct 2022 16:07:56 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 54019
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=23
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:37:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:37:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xpodeal.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
66.29.146.165200 OK 11 kB URL HTTP/2 xpodeal.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (43771)
Hash d45207ee05c1f0c57dfa075e61405ccd
a8d35143a2d828a739ea0fdde75f97d33621e7ec
a9a4adbbcee31ec277f1bdd573eef97dc4341f29f2db3b5685a02dfe4d2fe9bb
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 21:40:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10946
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.3.3
66.29.146.165200 OK 1.8 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.3.3
IP 66.29.146.165:0
File type ASCII text, with very long lines (10435), with no line terminators
Hash f7237084ac82ea6a4f5bf1448c3a2148
60457635a5e809ee1199c61090d8e33b91e8e1f2
18a1cb7f08c1ace52a79f46d73461ed03bf8cf5c9e8a3687eacc3e04f08e7a09
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.3.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Thu, 25 Aug 2022 00:12:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1754
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.3.3
66.29.146.165200 OK 21 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.3.3
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Hash b949966fb1c62c392babd0eb97a080ca
68842cbc531c38a01569da81eff51b1d358f7734
c7804b0b1571c1986e8661aef7343839d797bb368222a537c996b062f1d9f695
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.3.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Thu, 25 Aug 2022 00:12:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20885
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0
66.29.146.165200 OK 670 B URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (2630), with no line terminators
Hash 6867f0990d852a8660a2d6f7a6675183
0240940bdf174107a14d132fa82b50b1445ff2f8
598b0ec44ac00e2f238bebe6077530ad4e6ac41f99122d495313302b380c2868
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Fri, 14 Aug 2020 14:33:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 670
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0
66.29.146.165200 OK 6.6 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (30441)
Hash 3160c468e16b391c087428c6961602de
0e39e52d4887d3e52e7af98526a76a8b788738ed
4aaedd1cc4ee377bb8b5390fe56da25db79b9cf2d7e6c0d64c1bc8fc88436a95
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Thu, 18 Feb 2021 16:35:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6581
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6
66.29.146.165200 OK 1.9 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6
IP 66.29.146.165:0
File type ASCII text, with very long lines (9281), with no line terminators
Hash dc91028c24ac0d7a6f4872a1320fa5e8
508ce388de37cd7cf6eedcea816789880589479e
c019b08c90cf3573e8ea887626853781059d1af59698f7929cdc94c84054bddf
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Wed, 22 Dec 2021 00:24:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1863
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.13.0
66.29.146.165200 OK 4.6 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.13.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (29337), with no line terminators
Hash d57b8bb9da5c87b07c0bbfbf68eedfde
d85a4b62617cef8db8476076d9a2c4b5def0e226
0eccad1a79bcc73c4bd29ff253cd618161eb102c60cc755f42c55f7b85a1b763
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.13.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Sun, 19 Jun 2022 18:19:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4583
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
66.29.146.165200 OK 848 B URL HTTP/2 xpodeal.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
IP 66.29.146.165:0
Hash c962ba8e7d42ff9da18392b41dad5151
7b89bc5e6ad161df2e6d7f7fb3ad894aa04b827f
322a4949c5bdd82eb80c13bbbd407ce30a7ad226685c54270d246cb6960e524e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Mon, 11 Oct 2021 13:40:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 848
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-buy-together/assets/vendors/bootstrap/bootstrap.min.css?ver=6.0.2
66.29.146.165200 OK 18 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-buy-together/assets/vendors/bootstrap/bootstrap.min.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (65371)
Hash f8b5aa954f8c1610cf960ae8bcaf29ec
8f64d6aaa73e80e8099145753999d116bbf92c3d
eca72e6abec248afebd85351f96dfffa00e30ff84fe868ad0d49abafe6f79a5a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-buy-together/assets/vendors/bootstrap/bootstrap.min.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Mon, 01 Aug 2022 16:27:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18270
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-buy-together/assets/css/frontend.css?ver=6.0.2
66.29.146.165200 OK 1.6 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-buy-together/assets/css/frontend.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash dfc156d6e3bcd35348d4298e76289570
2a68826831adcd377687888f7d10758405cd2be4
f82b9e6e1953b7e0bbf48ad2e359ec69a6e98f4ead5c4cde179883fd45262160
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-buy-together/assets/css/frontend.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:56 GMT
content-type: text/css
last-modified: Mon, 01 Aug 2022 16:27:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1569
date: Wed, 05 Oct 2022 15:37:56 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-sales-popup/assets/css/frontend.css?ver=6.0.2
66.29.146.165200 OK 475 B URL HTTP/2 xpodeal.com/wp-content/plugins/fami-sales-popup/assets/css/frontend.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash 97cb75cfc1da711328ce7da1c5bb9f87
795186853bc79c95210889c599e36b0a828e63a9
5c4de4e57c001bd0268f6a51e3cc042a5a912679828d7cbb3f79dc6216689b35
GET /wp-content/plugins/fami-sales-popup/assets/css/frontend.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Mon, 01 Aug 2022 16:27:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 475
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.11
66.29.146.165200 OK 12 kB URL HTTP/2 xpodeal.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.11
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash dc07606c6f1719f22e60b5a66b6c83ee
0007da6b48940b57407d4345d997cdea4b062fc4
dfc4458610794e60eb66675406a99ffbfc5ece7ac2b6cc172050c32621aaf31a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.11 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 16:46:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12482
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21
66.29.146.165200 OK 1.1 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21
IP 66.29.146.165:0
Hash 263b70217f905feda4c01edde0b2737a
5ee9d3538967433d441e6aa357bf166724200523
1c82d8152cb3112b7df9b40a89ac28db20e51562266c13d392e8530fc06cd5ce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Wed, 31 Aug 2022 13:58:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1060
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/fonts/flaticon/flaticon.css?ver=1.5.8
66.29.146.165200 OK 563 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/fonts/flaticon/flaticon.css?ver=1.5.8
IP 66.29.146.165:0
Hash 4a3f6bd8206873b5ec0e029498d0c7d9
7a9e00fcf8bf94c2608048536337a5a2982924e1
96749f5be9c5fd41ed7bfdfaa53b89e06a872524e076d4d008a0cd9a412dab58
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/fonts/flaticon/flaticon.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 563
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/pe-icon-7-stroke.css?ver=1.5.8
66.29.146.165200 OK 1.7 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/pe-icon-7-stroke.css?ver=1.5.8
IP 66.29.146.165:0
Hash eafd532a9d530cbb91a75bd98d77b8db
9f90575082e9a0359928a277e681e467e20b02c7
a023d8531a89d481d1892417a04d983a4315ab508d8bc31eff0b044984bb2f16
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/pe-icon-7-stroke.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1683
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/jquery.growl.min.css?ver=1.5.8
66.29.146.165200 OK 628 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/jquery.growl.min.css?ver=1.5.8
IP 66.29.146.165:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (2115), with no line terminators
Hash e3fd66bc807e1548cc7d82279332748e
9037100976dfdc33c17ee65265c982b5fdebac92
98c8fa66dc17a3dd0f94692815fe70b3df4440e355df5f1ea917bdea25211269
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/jquery.growl.min.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 628
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/magnific-popup.css?ver=1.5.8
66.29.146.165200 OK 1.7 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/magnific-popup.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash ce4ce941a89517d4a19cf7cc266ae0d3
a7c0aad584b8941245d195702b17add09a76736e
bbe19f2a0cae112988859afb12bed2ae6e494bb7608437d24273ceda23448503
GET /wp-content/themes/ecome/assets/css/magnific-popup.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1679
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/slick.min.css?ver=1.5.8
66.29.146.165200 OK 397 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/slick.min.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (1330), with no line terminators
Hash ac85c45abcc30f4d521928445ee2b369
66b69b56dfe4aebcdac67143b2a68af4e56af938
deab7d6997b99829c6a9434002f551f70aa16b55186fa961e8803da53e3c5d3e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/slick.min.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 397
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/jquery.scrollbar.css?ver=1.5.8
66.29.146.165200 OK 2.9 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/jquery.scrollbar.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (682)
Hash a42096aa0bc38d9e5a8a16db3996faae
31f8ceb607349057299e0e7c429c70106582ea50
0f4c56205d31e27c4b7cdf71deb0ac34006a0a3cefff3a8261ae40f0ca18101d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/jquery.scrollbar.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2922
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/chosen.min.css?ver=1.5.8
66.29.146.165200 OK 1.8 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/chosen.min.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (9686), with no line terminators
Hash 2958ae46507bb7ec8e452d96dfd883c8
80a4829d2bc8ebed50375dfd0d64551946a9f0f6
8f24dd1e8cc5cec76d59a20d82f5178c6a8859d9ab184335b076fb1999d95bbb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/chosen.min.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1823
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/style.css?ver=6.0.2
66.29.146.165200 OK 447 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/style.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (311)
Hash c21cce3033a53bf919417a764da2db46
10093a23a0a1df28a960dd2791f2fe933c4bbd0d
aadd1e224f122cc9ed23a25dc48b93234a3ea37f236a2744844f6a7a07aa89cc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/style.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Sun, 16 May 2021 18:11:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 447
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/framework/includes/megamenu/css/frontend.css?ver=6.0.2
66.29.146.165200 OK 820 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/framework/includes/megamenu/css/frontend.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash b9a0e86f0f568c9ce0e5afafd2187756
c2d8102638a5f3e7f50fd8c4d5fcbdc095921c0e
6810bf8f1fad263198bc93aa2bf238a5d4cd69cfaa653929b3513fcc161c488e
GET /wp-content/themes/ecome/framework/includes/megamenu/css/frontend.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 820
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
66.29.146.165200 OK 4.0 kB URL HTTP/2 xpodeal.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 19:36:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/ecome-toolkit/includes/admin/live-search/live-search.js?ver=1.0
66.29.146.165200 OK 1.0 kB URL HTTP/2 xpodeal.com/wp-content/plugins/ecome-toolkit/includes/admin/live-search/live-search.js?ver=1.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (448), with CRLF line terminators
Hash 0fdf93ef794130a8ff86d9d37d3c79db
318c55f0470c22ea2851f91b8e0b7df2fe65274b
7795dae495cecc47118b46891c3a5875ad0a8ba4fde6dbae3c83dbf126da4b67
GET /wp-content/plugins/ecome-toolkit/includes/admin/live-search/live-search.js?ver=1.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1049
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-buy-together/assets/vendors/jquery-lazy/jquery.lazy.min.js
66.29.146.165200 OK 2.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-buy-together/assets/vendors/jquery-lazy/jquery.lazy.min.js
IP 66.29.146.165:0
File type ASCII text, with very long lines (4890)
Hash f4e74ab6f9031ba1a684515ededc6b69
63c0630bbafec0944be7711333836bc6d0cce63e
ab2a7343e8743ec8ee62deb447aac87a1e528e92f1a609515b468907ab40b8c6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-buy-together/assets/vendors/jquery-lazy/jquery.lazy.min.js HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2206
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-buy-together/assets/js/frontend.js
66.29.146.165200 OK 2.5 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-buy-together/assets/js/frontend.js
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 3655a952f540b1aeed24d2019587b010
07de3e9836d30a9cb800e1a20ea4ea69260eb47c
83f8b53385240a52b8cbd01e2c085f245533cf7ca776221714fed5d9649bf493
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-buy-together/assets/js/frontend.js HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2538
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-sales-popup/assets/js/frontend.js
66.29.146.165200 OK 1.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-sales-popup/assets/js/frontend.js
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash a8540f20d16c7ed0a95fca629542f1c0
5ab2fe6aa08b3050b0e1d8b3561ccc160ef04e2e
113d6b2523198c8a921bc12fbb8262e27ebb5293d01c8e01a0f5c175c6e5a569
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-sales-popup/assets/js/frontend.js HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1168
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/font-awesome.min.css?ver=1.5.8
66.29.146.165200 OK 6.6 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/font-awesome.min.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (30758), with no line terminators
Hash 7bf2a039d8c1c8bdac9e771b009ad318
b70aae17d4b99d0ef67df4a21363423e1aff2543
7618d0c2a6b4303a9223b40b5d4757131b8413fc8ecc0a7dc5a07c3402a8cc63
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/font-awesome.min.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6583
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.9.4
66.29.146.165200 OK 3.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (9115)
Hash 66c388e07cfb57895688b3347ab7290b
f23bd7a31995b3b19924575f2afa297a29257856
3971f3ab5179d1f4f91d2c102f27c2bf1dac2c04e2f62ff3eae3ebfa8c28494e
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3245
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.9.4
66.29.146.165200 OK 974 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.9.4
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (3037), with no line terminators
Hash fd8b126d3265cc6afc5b672273f78531
5058e579885cccf36c44bdeb5b7318bd75952af9
72da6709db061566cb5f67322f674a77f68acb69ac6181d37f9ca4a1bb7287b7
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 974
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.6.0
66.29.146.165200 OK 321 B URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.6.0
IP 66.29.146.165:0
Hash 159e4731a0ffba6862ee2a1bbcc8a805
7fb2a5ca7a80d96187fda406d0a1b7db23867fa7
c6f102a76dc397d94cfbadcd292d64bb45acaa29b0391b41a9f1cc68c2274ae2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 321
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.6.0
66.29.146.165200 OK 4.0 kB URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (34217)
Hash e00926a3c189b2f2396d96d90ac77785
f61219b1a1e4924051c4e5c7acb70cd925173bdb
30a6fd0e5a3610d5074e2a634513348ff8a5a92510d45c6c2621d6bda6b2fd27
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3952
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=6.9.4
66.29.146.165200 OK 857 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (3287), with no line terminators
Hash f91b0cde1c3ae9c4865dbe50b94b7e96
26c7baee70eca5d442f5f30a7c0ccd0a6187c105
224aecccc666e90a5607c1ee584952f275cae6c6f8cad50f9d9834d7499c4bd9
GET /wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Wed, 21 Oct 2020 03:38:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 857
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=6.9.4
66.29.146.165200 OK 1.7 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (7887), with no line terminators
Hash 494afef7fdbd631433fe8b40049c9733
e927f43e6ee2f70854247363612dab1107c514ad
54b56f475540254274fa193380ab680e39913768d9a227660bd571bba3456b7f
GET /wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Wed, 11 Dec 2019 07:19:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1728
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
66.29.146.165404 Not Found 32 kB URL HTTP/2 xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
IP 66.29.146.165:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (21275), with CRLF, LF line terminators
Hash 9addfcff27e52738acb4d411985c5221
54ab8a0da1bbe726a8bcee4e414040f64a2496e0
bfedf160840067ffc7cc054c7a842375d304c3050c4d8177ee5207f4ce278de9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://xpodeal.com/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: 520_HTTP.404,520_404,520_URL.e26b59d909a0b63f716805705183b4c4,520_
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Wed, 05 Oct 2022 15:37:55 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
66.29.146.165200 OK 2.8 kB URL HTTP/2 xpodeal.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP 66.29.146.165:0
File type ASCII text, with very long lines (9680), with no line terminators
Hash 8a91034fce0e4a2464d2170d38d31382
f00c20cfcbd136ee9aa20d07085c10f470548fe4
1a8f0bcd2b76caf977b08ed30bdd29eb77405ca4c1fe2315b41f8fe2542f1528
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 01 Sep 2022 12:44:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2799
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
66.29.146.165200 OK 3.7 kB URL HTTP/2 xpodeal.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (12211), with no line terminators
Hash b3777786fbf0ac18aa59c687154a9db8
3f24b0cfae49dc3e70f149edaf203a661cd59c88
8e3993f3b5eb33611a7c40d80d1cb048b4329ebb9ad0d9e8eb583e48fda70bb5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 01 Sep 2022 12:44:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3689
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.9.4
66.29.146.165200 OK 899 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (1668)
Hash 22d65ba38528349e705d912ce26bf8ac
c89ba006009043d93b88ff155b4fec8797330550
6253bcb85e4267ad3ba843145534e729ee2c1d7e85e5b4ab5b2e074ae636bca3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 20 Jan 2021 04:55:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 899
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.9.4
66.29.146.165200 OK 677 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (2139), with no line terminators
Hash a43fc0dde8fdd69656ad0957e62849c7
4b07cf702ac8a770c8cbffc22b9a788b6e5389ba
1ce3d0493424870c81deec0ec41de0592d2af9f91cd8081cd40a1d7ea89b614f
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 18 May 2021 21:00:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 677
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.9.4
66.29.146.165200 OK 934 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (2938), with no line terminators
Hash cf25dd071a208312bdc07f34d2cee027
76119563119eaae392ecc8903c989d98d0b93002
8635ba2cad8f887e72779bd526f8738ff6343c74cba715caf2eddea383ba7ce6
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 24 Nov 2021 03:30:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 934
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
66.29.146.165200 OK 4.6 kB URL HTTP/2 xpodeal.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (15660)
Hash 0232689bd203f330529b36a437f41a68
9046583f7469ad38297969f10a9513eb895d5316
feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 15:26:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.6.0
66.29.146.165200 OK 12 kB URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (56243)
Hash bc62c79810f6d9ff2023a3ce01fb17e8
c176d3254f491913c5567d35c85d0d02c6c9300a
abe49ff5c57ab5013f8eac78076ef149837282fce42df3f0f526cb440e3d155b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11779
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6
66.29.146.165200 OK 5.4 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (21310), with no line terminators
Hash 33081d75af44148dbfd85f7f8f4382ff
a2bac4c76a6a40839a6682df66eb40cd8c4d470d
b8dad2c0f7d74cdfcf2b9f96a17f72886b64edab3e392f7d72df15e1c1ac3119
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5350
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.13.0
66.29.146.165200 OK 6.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.13.0
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (24951), with no line terminators
Hash a8cadbc3c514fca4b31fd8d98bd99922
503b0d92ee27b87f4a7f9c5163d25bbadd90bd38
79bf34585f2d00399b1eb5020da9085931f5cb56fdfe643d4db3713959a2e2f0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.13.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Sun, 19 Jun 2022 18:19:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6249
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.18.0
66.29.146.165200 OK 1.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.18.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (4602), with no line terminators
Hash 6a5cf02c457796835cd28c6197b3b064
c58cdd6ea85cc624e313c7cfec9ed2d27e609703
d596e6c774b8f750e18905d4279d8dc1adbe532b7b6faf90241e01eede68d44a
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.18.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 13:58:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1201
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-quick-view/assets/js/frontend.min.js?ver=1.19.0
66.29.146.165200 OK 875 B URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-quick-view/assets/js/frontend.min.js?ver=1.19.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (2014), with CRLF line terminators
Hash 5720e01542059f32467265876b344f35
7c7fc90b634d60337fb4beb8fad6155bb0c0b276
61b47b87d57ef0ae60ad79e8c3f3cd7fa16768aeff18768bbdda1066bdaa7f8a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-quick-view/assets/js/frontend.min.js?ver=1.19.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 13:49:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 875
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/threesixty.min.js?ver=1.5.8
66.29.146.165200 OK 2.4 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/threesixty.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (7483), with no line terminators
Hash 3d234ebc71b4ea68e11ed22f342fd1e4
125c27e8ae92594f53a48d193fdcc2d9312ea014
46736161821f04f57beb18ff6780bb8a9d52b981001ab549bb667f2d9e255dd6
GET /wp-content/themes/ecome/assets/js/libs/threesixty.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2422
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/jquery.growl.min.js?ver=1.5.8
66.29.146.165200 OK 1.6 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/jquery.growl.min.js?ver=1.5.8
IP 66.29.146.165:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5797), with no line terminators
Hash 43a49723f88af3048eaa422ca65c5564
54c84dac91a0e25c7ef83a18370eb22dcaa877b1
bb4bb00e62002a74c2df9e6c3a0bac265894c9a020891e23fe6017e1a2a213db
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/jquery.growl.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1560
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/jquery.scrollbar.min.js?ver=1.5.8
66.29.146.165200 OK 3.9 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/jquery.scrollbar.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (11879)
Hash 7630ab41f54e4ad0e1bf26dc8a1c04d9
ab7ede001162b62c69ec7c77d867575307968893
e32b7e1e903512a39a7314abe133e7f978cf8ec0ed05d3f68753714fb477a820
GET /wp-content/themes/ecome/assets/js/libs/jquery.scrollbar.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3892
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/countdown.min.js?ver=1.5.8
66.29.146.165200 OK 1.6 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/countdown.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (4136), with no line terminators
Hash c3311ba759bff377a93be2da014be69f
a0a469c5be2f8fa35e94c2340499ed10f419b5f4
474684481430cc300f2641dec9acdb58f6d1557bb3781255ce3f0aa75d0e143d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/countdown.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1590
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/lazyload.min.js?ver=1.5.8
66.29.146.165200 OK 3.4 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/lazyload.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (4890), with CRLF line terminators
Hash 43394eb4b396cacdc154a374f039ee4a
79845381a5a3e9ed6c4a4af08ea6c0f5111c6737
525e7d16a1478db4a960a3038c58df70d2cdb508ef5a4d9e4225d6d5724bd2e6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/lazyload.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3356
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/framework/includes/megamenu/js/frontend.js?ver=1.0.0
66.29.146.165200 OK 1.9 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/framework/includes/megamenu/js/frontend.js?ver=1.0.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (1077)
Hash 51169af3f427311db33c1494ba8652c1
aad09e5ceb6b98f6e04cca6d1f4da7d1ff3d9fbf
ca65a57f7288f276257ac139d778dee2d0d1e9588eaf7972c5d917e53fc6bfb1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/framework/includes/megamenu/js/frontend.js?ver=1.0.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1874
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/ecome-toolkit/includes/admin/mailchimp/mailchimp.min.js?ver=1.0
66.29.146.165200 OK 300 B URL HTTP/2 xpodeal.com/wp-content/plugins/ecome-toolkit/includes/admin/mailchimp/mailchimp.min.js?ver=1.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (726), with no line terminators
Hash f4b15f0fedc3e96575f0bd1cae5ed54e
cd77595f9187513e9a2f53f663ca26dc700dac42
d1a5c29582ad7cf999be8928e99afb42285f6310706531c84b7c4571c9b9faa9
GET /wp-content/plugins/ecome-toolkit/includes/admin/mailchimp/mailchimp.min.js?ver=1.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 300
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/wp-util.min.js?ver=6.0.2
66.29.146.165200 OK 646 B URL HTTP/2 xpodeal.com/wp-includes/js/wp-util.min.js?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (1305)
Hash 6545e92af6fa2c33aed6fb1d0492af5e
b95b4d49921004f3a23ea8d057beadd4d45a6d74
ef9475d7d2b07f279a49a8458afc74f865810087e299437ef355024b93929eb2
GET /wp-includes/js/wp-util.min.js?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Sat, 26 Jun 2021 00:20:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 646
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.9.4
66.29.146.165200 OK 3.4 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (13887), with no line terminators
Hash 25fb50f4945fa93ea85568456a86fa97
0ea82027ad4720f101de9715adf4ad963a326207
c84cd16cc99c06eec7939713048efa3f35d176236b4c9740e3eb060c12791fb3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3436
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.6.9.4
66.29.146.165200 OK 1.0 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (2600)
Hash 58ae168dadba117e645a850bb22c9e48
b397d052c90ecf4b48209a86ecf72bbe90a0d87f
8adec06492eb0bb02580aef8f86d4a420997a8d56393d526785498e266d1af06
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 18 May 2021 21:00:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1041
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21
66.29.146.165200 OK 4.5 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21
IP 66.29.146.165:0
File type ASCII text, with very long lines (11827)
Hash ad837a8d18fb12f3db5d03cef2956caa
520179c7b4cd32f94386f4576e439e3689e18747
b6618604f7dadbad0b877cf727356465919707ceec7965c340adeca61d824b36
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 13:58:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4457
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/chosen.min.js?ver=1.5.8
66.29.146.165200 OK 6.3 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/chosen.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (28882), with no line terminators
Hash 0e65af36588d1db51d60ae82283e4646
256f31af54d1de3357e9f558b30edbc231fc91de
05e0dcbc1718752d450480d3c8d36bf7c600609515871de9ce68c0da31c15f41
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/chosen.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6300
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/bootstrap.min.js?ver=1.5.8
66.29.146.165200 OK 5.3 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/bootstrap.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (19231), with no line terminators
Hash a947f50a94af5a31ca82dc99bc91385f
fcbbd45ed579b756148b399e5f6a2d7f1002314d
aec0420871f0a41b23bb2b9848fa6c7b01b8281898209597786b06b3ff97698b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/bootstrap.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5300
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/magnific-popup.min.js?ver=1.5.8
66.29.146.165200 OK 7.0 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/magnific-popup.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (20087), with no line terminators
Hash 5b52c86b5ffcd4a52589460441cccee6
ffd38d960569603b3bfa83aac25efb62ef6fb2ea
e91168e8781c8fe362374bd4d4d267c0788964db1478c4a8fbea2129528d306a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/magnific-popup.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6965
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/slick.min.js?ver=1.5.8
66.29.146.165200 OK 10 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/slick.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (46782), with no line terminators
Hash 42a176600acdaf90c34591ac79b597f2
26c44c764104877ab7c30e215cf62f39e5bc1ccf
d6f2eb1e0dabc9199d469b3cec024a30a8609272e6841016fe9b23186f9eb18a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/slick.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10319
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/functions.js?ver=1.5.8
66.29.146.165200 OK 8.0 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/functions.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash fc45eb3af3274451954800d1d1ca6e60
2803e1dadb514eae02bf049eb2e629d998beb6cb
a9fd0e3a4b9ac5671243e3502d70156ddf326db2f3b699a20d6dc4b5c1043416
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/functions.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Fri, 21 May 2021 19:06:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8024
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0
66.29.146.165200 OK 5.6 kB URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (20418)
Hash c15318397253a9f8bc4e80fc9be51955
543b224eb0fce0d85b1290a1e20c3b2415be3a22
2d67bfb3628d93c140d563b4bc572f54da1e330fb8d54ff9035214607a5bde6d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5560
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/underscore.min.js?ver=1.13.3
66.29.146.165200 OK 7.2 kB URL HTTP/2 xpodeal.com/wp-includes/js/underscore.min.js?ver=1.13.3
IP 66.29.146.165:0
File type ASCII text, with very long lines (18876)
Hash 8f44fac7de7704cc9c42ca9cf95071b8
1fa95065580a736700586a6c6ba1e0c3304d301c
89d8fb5c9897186f5d8295777f8eecd5c9a8ec5a40b0e01b9afe3e6ff851a4a1
GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 28 Apr 2022 00:09:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7176
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.6.9.4
66.29.146.165200 OK 3.4 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.6.9.4
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (9536)
Hash eed261640a13b609653053d2a638f872
93cda65548c43a123c56258d2e8886f9b4a2c2b3
6a5412cadd9b2553341185b32a0614f4c45e400441a7852841a8d886fb0c2f6c
GET /wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3432
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=6.9.4
66.29.146.165200 OK 1.7 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=6.9.4
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with very long lines (6322), with no line terminators
Hash 9c56675b1e3db79804c16b978c50f296
fb27a61dc9588565546c88e72a545323060fc21a
5dc76185932b04ad3ac26b69e8446ca5e2b123ae412aa82f2f13dbdf0c5cbf9d
GET /wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1713
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.6.9.4
66.29.146.165200 OK 12 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (30938)
Hash 26ee07c645a18d43b915f888356868e8
67afa92b2d66c314451378e692b6b3bf278f9c75
369ed192b03b104959e6c16572b663c9017658a6c8687cc88ffa7e441a7d02c8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11613
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/style.css?ver=1.5.8
66.29.146.165200 OK 37 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/style.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (904)
Hash c24ef7b09a3630fb50e8429a736c1235
976f993d3c37df224835a91459e3903a32acf91e
33a0ac1654e31a9c11fdeb731037870ff5a9c314ceedff8be6f35bc1fdc2efbb
GET /wp-content/themes/ecome/assets/css/style.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Tue, 08 Jun 2021 04:20:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 36851
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
66.29.146.165200 OK 30 kB URL HTTP/2 xpodeal.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (65447)
Hash 34f918ada1fe4f01c5a4b90065bbc37a
a731f6ce2d413805e39ae45994012b1bd5ea1e2b
eba158d5ab26a5a54a3dcfcea1072c636f44e92fc2eb30a3f27cd5be3f891dfc
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Thu, 11 Mar 2021 01:37:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30273
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.11
66.29.146.165200 OK 0 B URL HTTP/2 xpodeal.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.11
IP 66.29.146.165:0
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.11 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 27 Jul 2022 16:46:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 91616
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/uploads/2018/03/logo-1.png
66.29.146.165200 OK 0 B URL HTTP/2 xpodeal.com/wp-content/uploads/2018/03/logo-1.png
IP 66.29.146.165:0
GET /wp-content/uploads/2018/03/logo-1.png HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: image/png
last-modified: Wed, 03 Aug 2022 22:12:17 GMT
accept-ranges: bytes
content-length: 33352
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0
66.29.146.165200 OK 0 B URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0
IP 66.29.146.165:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 42005
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.8
66.29.146.165200 OK 0 B URL HTTP/2 xpodeal.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.8
IP 66.29.146.165:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=chris.fung@slurpmail.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 12 Oct 2022 15:37:57 GMT
content-type: application/javascript
last-modified: Wed, 27 Jul 2022 16:46:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 45472
date: Wed, 05 Oct 2022 15:37:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Rubik%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%7CLato%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CRoboto%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Rubik%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%7CLato%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CRoboto%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i
IP 142.250.74.10:0
GET /css?family=Rubik%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%7CLato%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CRoboto%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 05 Oct 2022 15:37:56 GMT
date: Wed, 05 Oct 2022 15:37:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2