GET /cLDkhWa HTTP/1.1
Host: hexe1.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Tue, 05 Dec 2023 22:06:27 GMT
content-type: text/html; charset=utf-8
content-length: 156
location: https://eridal-walting.icu/0a148434-c760-4256-bc39-e9ecb3539bff?uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f&sd=hexe1.co
X-Firefox-Spdy: h2

GET /0a148434-c760-4256-bc39-e9ecb3539bff?uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f&sd=hexe1.co HTTP/1.1
Host: eridal-walting.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Tue, 05 Dec 2023 22:06:28 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://benefits.hexaloansnow.co/hex-zplm?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
pragma: no-cache
set-cookie: 0a148434-c760-4256-bc39-e9ecb3539bff-v4=K1Q6XvtIjOhJwNJ08_YAvtkbDNJEyTu1A4cUx-Ea0Zg; Max-Age=86400; Expires=Wed, 06-Dec-2023 22:06:28 GMT; Domain=eridal-walting.icu; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=2K%2Ff3BiX8z071DG3K8yt3X%2FDV6%2FPrO74xqNZ6CL1SusvaRnCv9PU4cs2vwg3pIOlaxNEtCiASsMwRJ77CaiRXq8zzQmw5qpRp7a5W6oKVUuX6K9XU38W%2FKDRJCV7pBTlR1RoY0EvRFZRwznoAImcdQ%3D%3D; Max-Age=31536000; Expires=Wed, 04-Dec-2024 22:06:28 GMT; Domain=eridal-walting.icu; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:29 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 16:06:21 GMT
etag: W/"65660ffd-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QfxUCWJuTtO3fVER4LFXDtZ557GKhFn3hiDN%2BWvi8aSkjbgAVn7QKME0c4GzbKgjp6Ht58mVt1Yl6Ca3FEsl8CnYaJauKSa67K45VvJfAppLEqKx6mhMvJ2S2BAn%2FSUf92mxHzzC5qZGpn4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830f98b9ac62b4eb-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 07 Dec 2023 22:06:29 GMT
cache-control: max-age=172800, public
content-encoding: gzip

GET /gtag/js?id=GT-MRLGLPZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 22:06:29 GMT
expires: Tue, 05 Dec 2023 22:06:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79154
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /wp-content/plugins/ultimate-member/assets/libs/legacy/fonticons/fonticons-ii.min.css?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:29 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"86ef-60a3fff536221-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mWZ2uuS%2FjJKenpO%2F%2Fn2ctcXjBNoIk%2BfYlH5QnJONMHiw0uGBhk55vdh3X19ZocgOjVCID4ZnI7DcQQM%2B5ung9Y%2BOZi%2F%2BAAuYwLL1GX2P4G44FPMx75QALZBzFlstvS%2BkL4Ak0knC11U8OuQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b95c22b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.css?ver=2.6.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:29 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"36c-60a3fff5371c1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cXOx1lq%2F0476BdevYt5GIQCy3bYFLhINVoAdtsGMe4%2BxZKGGKPnY9GjKZFjrG%2Fb9%2BYEcHNdzw8vaEas2H%2BzmAOvtgLiKQqQx3XZYffEQXJLLke7zOLwajFZ1iImiOV5PZ2r9S7vnTO3nDEU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b95c21b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/css/um-old-default.css?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"1760-60a3fff533341-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4dwGLEHyFzDW8pDw%2Bx%2BHqHgVBY6rQKukNHishND0FzmFzmHCxgyuD0wt6VyWQG8jW9n%2BfzKD5z7Eon0agbWAg8xLnBC4QIScEGGQW6mJp2Rxk3DcxQ4nFPvAQ5u3WBS%2FGScJnPeTjzHEaPk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b98c4cb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/css/um-account.css?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:29 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"1096-60a3fff533341-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2bXOHqBEm4iEurTvYSRD0IvvIMRcrYcbm1XbZzElxAqBaEhDBpuLenGkER7n%2Fa1r4kP%2BQBkG%2F21gDUrR5U2bU3fL6%2FdrHYbvBCa1TzYIZ7YPwql0fUs%2FSAZExpz96fOjW2gH6ciaBDn%2ByMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b96c31b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/css/um-misc.css?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"7fc-60a3fff533341-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o%2Fr8WUrBrp6rwikAfIQ11PdQDMwmyDb2SSqgSC2JLpglSfpU5tQICyUATK61bOnjqzJHtUvfZddFfj4IXheNwbINTakgPBnTq3D%2BBcyA7ALoxe3sQLCHodePaV2lzerFxKWUCxJMbJcBtx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b97c3ab4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.23.1 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/javascript
last-modified: Tue, 07 Nov 2023 06:59:25 GMT
etag: W/"53f-6098a82d80903-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0yRtXAJq%2B6hzbHy0RgAj46icCBsNw2s55mirzgQVOLbzMcHiecOUgZ7ztBtHcI4jHW4%2F%2BjZGg7Ql44B87mH5pt4VvwkqVuXpfYaOVfI9aPZm5%2B9HjNShHiEdIaohWuqnVXgLicIBCWwpCyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b9bc71b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 22:06:29 GMT
date: Tue, 05 Dec 2023 22:06:29 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /wp-content/plugins/ultimate-member/assets/libs/select2/select2.full.min.js?ver=4.0.13 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:31 GMT
content-type: text/javascript
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"1356c-60a3fff5371c1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GuEV75Wjh80LV3pPQd5w1XzKc6SKXeIGt1H33wfZu5G9n7MlzqxMyE7SFDmg3Jqk90u2PVshvQfjrjwjtPjR4EP%2FhUtXEkDp0xY1GF%2BEPGxJ91JcsElMO%2BlRXHFFHgekPvtTwxTeR5EkwSw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98ba5cfdb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:31 GMT
content-type: text/javascript
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"317f-60a3fff5342e1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z%2B4FpL9ubwQRKtoQnPioWLeoV1FM5CVbw8VmJMRa38ltIq9oicKzGoGRtXjPaV8P6KNG%2F9neicL%2FLBn9vvRNVXdwZD2O2HeRCsjBdePzip%2F%2BsYgbz%2BfBMYkwZ1lqOz865ZhzLY7L3S0X%2BVQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98ba6d19b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/javascript
last-modified: Wed, 27 Sep 2023 16:48:22 GMT
etag: W/"1213-60659f59d4f8c-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ELiNehlmEI4EQx8oNp5iDzuJvUk7yHtSpb31irX5S%2BpjcC2YPGQQwQvkUu0eI46MXnMO51%2FK7yyg0NTBA7VUB9TqDPbPE01TLvEVQmUFzHSInpIXKyBlaRbV%2FTtJeSJMZ8EWMOoX6Q%2BAbns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98ba4cf0b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:31 GMT
content-type: text/javascript
last-modified: Wed, 27 Sep 2023 16:48:22 GMT
etag: W/"24e5-60659f59d7e6c-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OHAPFbSn7o8gQN4EYWc1hBBhewov3LFYxVk6KUxnRQWQPsaAg6uHb%2FqO6Qcg%2BZFhf%2FlQyfpSztK45epyYLJn6mWmN8gnO9U5jjM4DJckHOyiaBQyK%2B0cLc8PXIFMzEsuzGSBFAN9r52ibBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98ba6d11b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://benefits.hexaloansnow.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 493532
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /form/loader.php?orig_p=69A615779671448B8F768E95770A87C6&p=69A615779671448B8F768E95770A87C6&ppv=0&site=https://benefits.hexaloansnow.co&queryString=%3Fsource%3DHexa_38_C7_NL%26clickid%3Dw3c38rg1d6drq6htianq8lfo%26uuid%3De475cad3-d4d4-44cf-90d8-37a05a0ed35f HTTP/1.1
Host: cdn101.viprev.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 22:06:31 GMT
content-type: text/javascript;charset=UTF-8
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 830f98c12c47569f-OSL
X-Firefox-Spdy: h2

GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/javascript
last-modified: Wed, 08 Nov 2023 06:59:40 GMT
etag: W/"15601-6099ea18c1a26-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IDXznjbBGQes7y3VUASsYJVTfSD2b%2F74bC7ulVfP%2FsSUclBjydqHI7ARbg8shzR6oZ9L8y1TfnxdJjLCT5RYO2PqDXuTkV9fLoqYDJ8IEQUDsWv0gCQ1qiA6Hot%2FHuD2VYZUE5gEO9dZqRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b98c4db4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/javascript
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"1a0-60a3fff5342e1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Asfmr%2BraNM%2BKPLpwQofxJ6WoXX7AUZZyPtuksq6toBO0nUnsxgxlRaDL6zTvQkvO8%2BXP1Bahv9h3%2BalXn5NmfKuVfUxVUvtO2QjscOlGVrY6HHqriQE3EtzeY75qDmT03IrsWhQNIdmjeQ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b98c51b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/javascript
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"149d-60a3fff5342e1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kTaZLhgyunk%2F6lbdSS13d4f2e5ZlsePeMcDWIUb%2BYv4ZNgckRg08cjDtXd8U3tu0BFSpJdvpB4Rl%2FENwZiwRus%2FFJ57kdvUc3V26iVJHvT1Z0GWVnNJal%2Fa%2B4Nc%2BGopQ%2FASxwE%2F76JhGFAA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b9cc7bb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://benefits.hexaloansnow.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 493532
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://benefits.hexaloansnow.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 493534
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /wp-content/plugins/ultimate-member/assets/js/um-crop.min.js?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/javascript
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"4267-60a3fff5342e1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kEkctlIw%2BNG3PDya97APDVM6Jty3WmmH8FSJanqTuBWGG%2BnyXT9tAOftS81gNQHsgpeNxbfQUGNatP5%2BkdflsNbt%2Ft72l0zWQqX9UShhxLW53DkQ2H%2F6nrkpCi1Keoa3It0J2qMY5aRXye8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b9cc7ab4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/js/pickadate/picker.time.js?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/javascript
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"7ce7-60a3fff5342e1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BhW8%2FUpKEuBGiyaiwo1Qz3cvIpfCzhsyAqE4DzUMC9u85lGFDLZoqLQRBge5SB1rICeBukujYQUv%2Fhq9zxgnGbjY20qWFz7hXqfR7Aerp6bM%2BNgUxzKF3c%2FxaMR%2B3SZayQjAD1pH13F5pI8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98ba0cb4b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ds-gravity-forms-for-divi/styles/style.min.css?ver=1.0.5 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:29 GMT
content-type: text/css
last-modified: Mon, 06 Nov 2023 18:59:35 GMT
etag: W/"2554-6098074870541-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=88llAWH7hlDhv%2BRPYebkK8hHXnYZZbM5OJUcusDGWZcLa1sAPj2nILcLvoSV%2FxY9fNgLC%2FuBBaxTEiuT679gpEOcIoDiMLA70dwaFjOuLnH9Z6rbMdXrg3yZlklEw5FQcBrWC2HgWQy%2Blw0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98b93c0eb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.7.0 HTTP/1.1
Host: benefits.hexaloansnow.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://benefits.hexaloansnow.co/hex-zplm/?source=Hexa_38_C7_NL&clickid=w3c38rg1d6drq6htianq8lfo&uuid=e475cad3-d4d4-44cf-90d8-37a05a0ed35f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 22:06:30 GMT
content-type: text/javascript
last-modified: Thu, 16 Nov 2023 07:30:43 GMT
etag: W/"3908-60a3fff5342e1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6TyTc%2Bg%2BdcJryYWY1LWqrbestNFprQMMAnFAPbhyWZfUTa13vhiXIA1bXDbRgoe0FcvO5oIdSHT%2BOU1Y2hnvGBWefT6RBlFevuv1%2BlOwJeR1iOXAJw4KjufaEvOtXWcvGvAx%2BZ2ZySgwMXE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830f98ba2cd6b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400