firefox.settings.services.mozilla.com/v1/
18.165.201.103200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 18.165.201.103:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 01 Oct 2022 19:02:44 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 19d5615c4d307c11803beb015d8f6562.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: WZ8_Ak5-5_GJfcsu42aAseJ_QtOamFLGTEPHQ2ow8QoYgkUoU9MYIA==
Age: 425
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 24cdc937930ac2ef9c8f46ba1deabcc5
397417929951bf20f235d5f91510163ac213dc71
eb128aec099dbf1919ee5d965221e904ad3a2162583683cec44518640b505447
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB128AEC099DBF1919EE5D965221E904AD3A2162583683CEC44518640B505447"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14001
Expires: Sat, 01 Oct 2022 23:03:11 GMT
Date: Sat, 01 Oct 2022 19:09:50 GMT
Connection: keep-alive
xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
66.29.146.165301 Moved Permanently 707 B URL HTTP/1.1 xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
IP 66.29.146.165:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sat, 01 Oct 2022 19:09:49 GMT
server: LiteSpeed
location: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
x-turbo-charged-by: LiteSpeed
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
108.156.28.51200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 108.156.28.51:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 01 Oct 2022 03:39:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 17a77a72dc1e9981253a822e540e37c2.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 2yBkXbF9Lnom2tKgagsCnAjiszQ1eA58_W_d1yn9y6HCVVgVhFbWGQ==
age: 56194
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 01 Oct 2022 19:09:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
18.165.201.103200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 18.165.201.103:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Sat, 01 Oct 2022 18:32:55 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sat, 01 Oct 2022 19:20:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 19d5615c4d307c11803beb015d8f6562.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: 6riO9HtKKDbLXXJJW0QLTggpkl48Rnq7ywXiYLqwv595F85wug-BTQ==
Age: 2217
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash e8b7d1cede6152fffb63099109ac357b
98ed687f8d603719a8426f8af92904f16fe95d53
7e4bb0b00a36a3bcdbc1e53c666b885dfdc0d1070924585414f253a6ac4897e7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 19:09:50 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 04:33:12 GMT
Expires: Sat, 08 Oct 2022 04:33:11 GMT
Etag: "98ed687f8d603719a8426f8af92904f16fe95d53"
Cache-Control: max-age=551600,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75377eb6faa10b59-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 829e839c217bf861b8cf90c8d636f510
459714fcf0d374bdc078ef59d122d59bf9312c5f
36282e09bb25caf3d7350c4bee485cb87947aabc7d7409169caf15c2e75d8b7d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6051
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 19:09:50 GMT
Last-Modified: Sat, 01 Oct 2022 17:28:59 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.82.48.240101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.82.48.240:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GFX9D5gSeEeAhp8YdDZbGw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tc7nG+xjiuxR7YDG2tgD5ehjjlM=
xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
66.29.146.165404 Not Found 29 kB URL HTTP/2 xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
IP 66.29.146.165:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (21275), with CRLF, LF line terminators
Hash 711fdbc999ac8b78877160bc938c0fa4
a8446ab422b3798c7ff8ae36369ad8010fcd9633
c1445ed61cbbe18eb1aebea4b3e52682317432307d547f34e048d122e3c66373
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://xpodeal.com/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
content-length: 28727
date: Sat, 01 Oct 2022 19:09:50 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 1384e669a9e259cccf32489be673e7c4
7f982ae66621ff7e5855f2b025e3ae034706ec33
eb462a28dbd7e93cd13a170acfcbf35babb3b7ef7e7d1ddeb30d377630ea30f8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 19:09:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 1384e669a9e259cccf32489be673e7c4
7f982ae66621ff7e5855f2b025e3ae034706ec33
eb462a28dbd7e93cd13a170acfcbf35babb3b7ef7e7d1ddeb30d377630ea30f8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 19:09:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xpodeal.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.3.3
66.29.146.165200 OK 1.8 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.3.3
IP 66.29.146.165:0
File type ASCII text, with very long lines (10435), with no line terminators
Hash f7237084ac82ea6a4f5bf1448c3a2148
60457635a5e809ee1199c61090d8e33b91e8e1f2
18a1cb7f08c1ace52a79f46d73461ed03bf8cf5c9e8a3687eacc3e04f08e7a09
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.3.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 25 Aug 2022 00:12:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1754
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0
66.29.146.165200 OK 670 B URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (2630), with no line terminators
Hash 6867f0990d852a8660a2d6f7a6675183
0240940bdf174107a14d132fa82b50b1445ff2f8
598b0ec44ac00e2f238bebe6077530ad4e6ac41f99122d495313302b380c2868
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Fri, 14 Aug 2020 14:33:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 670
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?key=AIzaSyDKbHmwzL20wAxDfLRnTHeJ0I8uAq_hU_Y&ver=6.0.2
216.58.207.202200 OK 54 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyDKbHmwzL20wAxDfLRnTHeJ0I8uAq_hU_Y&ver=6.0.2
IP 216.58.207.202:0
File type ASCII text, with very long lines (2456)
Hash 8c1b18f4db72aca635701c1f0a6b909e
046573f29b38f0826e96eccbf73e74df3920df6a
7b300b692896b969b513d28ea1d1a5da791c6e951cf4d5321962cef732022457
GET /maps/api/js?key=AIzaSyDKbHmwzL20wAxDfLRnTHeJ0I8uAq_hU_Y&ver=6.0.2 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Sat, 01 Oct 2022 19:09:51 GMT
expires: Sat, 01 Oct 2022 19:39:51 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 54016
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=17
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6
66.29.146.165200 OK 1.9 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6
IP 66.29.146.165:0
File type ASCII text, with very long lines (9281), with no line terminators
Hash dc91028c24ac0d7a6f4872a1320fa5e8
508ce388de37cd7cf6eedcea816789880589479e
c019b08c90cf3573e8ea887626853781059d1af59698f7929cdc94c84054bddf
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Wed, 22 Dec 2021 00:24:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1863
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 83f9407574c75ca600c57af0637cb200
4ebabbc1900b8f575e90186e2024e48097b0c8d2
1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 19:09:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 1384e669a9e259cccf32489be673e7c4
7f982ae66621ff7e5855f2b025e3ae034706ec33
eb462a28dbd7e93cd13a170acfcbf35babb3b7ef7e7d1ddeb30d377630ea30f8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 19:09:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xpodeal.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.3.3
66.29.146.165200 OK 21 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.3.3
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Hash b949966fb1c62c392babd0eb97a080ca
68842cbc531c38a01569da81eff51b1d358f7734
c7804b0b1571c1986e8661aef7343839d797bb368222a537c996b062f1d9f695
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.3.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 25 Aug 2022 00:12:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20885
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0
66.29.146.165200 OK 6.6 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (30441)
Hash 3160c468e16b391c087428c6961602de
0e39e52d4887d3e52e7af98526a76a8b788738ed
4aaedd1cc4ee377bb8b5390fe56da25db79b9cf2d7e6c0d64c1bc8fc88436a95
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 18 Feb 2021 16:35:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6581
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.13.0
66.29.146.165200 OK 4.6 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.13.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (29337), with no line terminators
Hash d57b8bb9da5c87b07c0bbfbf68eedfde
d85a4b62617cef8db8476076d9a2c4b5def0e226
0eccad1a79bcc73c4bd29ff253cd618161eb102c60cc755f42c55f7b85a1b763
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.13.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Sun, 19 Jun 2022 18:19:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4583
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2324
Expires: Sat, 01 Oct 2022 19:48:35 GMT
Date: Sat, 01 Oct 2022 19:09:51 GMT
Connection: keep-alive
xpodeal.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
66.29.146.165200 OK 848 B URL HTTP/2 xpodeal.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
IP 66.29.146.165:0
Hash c962ba8e7d42ff9da18392b41dad5151
7b89bc5e6ad161df2e6d7f7fb3ad894aa04b827f
322a4949c5bdd82eb80c13bbbd407ce30a7ad226685c54270d246cb6960e524e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Mon, 11 Oct 2021 13:40:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 848
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2324
Expires: Sat, 01 Oct 2022 19:48:35 GMT
Date: Sat, 01 Oct 2022 19:09:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2324
Expires: Sat, 01 Oct 2022 19:48:35 GMT
Date: Sat, 01 Oct 2022 19:09:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fc3f7b5-4c80-4662-ba8b-7997bdbdb6a3.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fc3f7b5-4c80-4662-ba8b-7997bdbdb6a3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d31a422078d02bda318c693c05a58dc
2df7db53629c7adda2c0a4dfe9c17791b73a75e1
a07fe4e135b52da6dfa9d8a55684f0a3bf5f5ce52c4064c8ab37836a939902a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fc3f7b5-4c80-4662-ba8b-7997bdbdb6a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8299
x-amzn-requestid: 91eed6b6-632f-472b-93d7-4192425fcdfd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZSxLDF0SoAMFWgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63376246-17bb04894cc786555d693ec3;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 21:40:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pt23XcORl063B99HGVhjQwBrS36T7GBIAQO7StLrEH8PKIc4edxQwQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 21:52:55 GMT
age: 76616
etag: "2df7db53629c7adda2c0a4dfe9c17791b73a75e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Rubik%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%7CLato%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CRoboto%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i
142.250.74.10200 OK 12 kB URL HTTP/2 fonts.googleapis.com/css?family=Rubik%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%7CLato%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CRoboto%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i
IP 142.250.74.10:0
Hash 028bcd324bc87f6c46ccec0519ba5170
3982a69bf345aa282e0539f91d1ac1c2e9492749
65ac73cdf6d1bf54a074b92a37545d121ba3622ac875b098d72d4f9025eeedfa
GET /css?family=Rubik%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%7CLato%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CRoboto%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 01 Oct 2022 19:09:51 GMT
date: Sat, 01 Oct 2022 19:09:51 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d8201d9-93ae-492b-8ea9-d245fa2e4073.jpeg
34.120.237.76200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d8201d9-93ae-492b-8ea9-d245fa2e4073.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9e7ba045a723120501994dea21709db
303c6bb672425443a15bbe22394bd1149f887904
b1bea7212e55ec8eaf62434214a86fed7d6a990d105984d79a7fa0e793395d59
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d8201d9-93ae-492b-8ea9-d245fa2e4073.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3640
x-amzn-requestid: b5f5c567-8aa9-414b-8310-cf3006711ee9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJo1vFIwoAMF2mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333bb57-0f1cbcbb29287f5367a14b67;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 03:11:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GDkc-K5EE8VRClm1ymTQLg6vGaPliNgCox3kOk9E4d2YkCqRzEjdfg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 07:19:24 GMT
age: 42627
etag: "303c6bb672425443a15bbe22394bd1149f887904"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb90508fe-e6b6-4ad0-9afc-67b46e4d0aa4.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb90508fe-e6b6-4ad0-9afc-67b46e4d0aa4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c475b8cc11fdaabbda170c6605d1391
7eea9aa04c5a72c417a580ca45341a0b5adc72cf
888de88ddad429a0bdb565b1f069dab4bea55a3b8a662c4efd9b75fd261dee3b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb90508fe-e6b6-4ad0-9afc-67b46e4d0aa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8734
x-amzn-requestid: 7a2713f7-e16b-4952-8e2f-76022bbbd7a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZSzHfH3toAMFijw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63376562-27b598460ce2f319598fdd72;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 21:53:38 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -aqIjL70ocOyhaZ8nQJUmCfDLBN0kkmTm2vY_xtwEsWZKi3DxHR8HQ==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 22:19:07 GMT
age: 75044
etag: "7eea9aa04c5a72c417a580ca45341a0b5adc72cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03e4f558-3c34-42eb-aa43-9896f0e6ce87.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03e4f558-3c34-42eb-aa43-9896f0e6ce87.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 574cd0b975349cc445e798136863c8a0
74c20bb0c312988822deb9d46b20e4642357fbd7
62d6448a8da1ed783761e1e966c3f03f2d9b4351e04e13e71e330e4cce465fc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03e4f558-3c34-42eb-aa43-9896f0e6ce87.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8269
x-amzn-requestid: f2ac41dd-fd33-4803-ad29-63a9b7877af2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJTcGFA_IAMFfRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333991a-36d628d17d8576972fcf6822;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 00:45:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8FdaRbtsOeuH-qLdBpgPJjdPzx_vcUeaRoAhVT3IkV0jrE1XAwRFAw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 22:16:14 GMT
age: 75217
etag: "74c20bb0c312988822deb9d46b20e4642357fbd7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: f0791b53-3c5f-4d94-954d-992a529ebb60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPnunF35oAMFYbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63361ff6-2adb303349153ced73ccecf6;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 22:45:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: F3fk5JnJ9ZFNPan-8DuLb4kuTiYKfniBar3qNlsuqd8a0saW3sEGvQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 04:41:31 GMT
age: 52100
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-buy-together/assets/css/frontend.css?ver=6.0.2
66.29.146.165200 OK 1.6 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-buy-together/assets/css/frontend.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash dfc156d6e3bcd35348d4298e76289570
2a68826831adcd377687888f7d10758405cd2be4
f82b9e6e1953b7e0bbf48ad2e359ec69a6e98f4ead5c4cde179883fd45262160
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-buy-together/assets/css/frontend.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Mon, 01 Aug 2022 16:27:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1569
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-buy-together/assets/vendors/bootstrap/bootstrap.min.css?ver=6.0.2
66.29.146.165200 OK 18 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-buy-together/assets/vendors/bootstrap/bootstrap.min.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (65371)
Hash f8b5aa954f8c1610cf960ae8bcaf29ec
8f64d6aaa73e80e8099145753999d116bbf92c3d
eca72e6abec248afebd85351f96dfffa00e30ff84fe868ad0d49abafe6f79a5a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-buy-together/assets/vendors/bootstrap/bootstrap.min.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Mon, 01 Aug 2022 16:27:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18270
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
66.29.146.165200 OK 11 kB URL HTTP/2 xpodeal.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (43771)
Hash d45207ee05c1f0c57dfa075e61405ccd
a8d35143a2d828a739ea0fdde75f97d33621e7ec
a9a4adbbcee31ec277f1bdd573eef97dc4341f29f2db3b5685a02dfe4d2fe9bb
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 21:40:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10946
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-sales-popup/assets/css/frontend.css?ver=6.0.2
66.29.146.165200 OK 475 B URL HTTP/2 xpodeal.com/wp-content/plugins/fami-sales-popup/assets/css/frontend.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash 97cb75cfc1da711328ce7da1c5bb9f87
795186853bc79c95210889c599e36b0a828e63a9
5c4de4e57c001bd0268f6a51e3cc042a5a912679828d7cbb3f79dc6216689b35
GET /wp-content/plugins/fami-sales-popup/assets/css/frontend.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Mon, 01 Aug 2022 16:27:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 475
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/fonts/flaticon/flaticon.css?ver=1.5.8
66.29.146.165200 OK 563 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/fonts/flaticon/flaticon.css?ver=1.5.8
IP 66.29.146.165:0
Hash 4a3f6bd8206873b5ec0e029498d0c7d9
7a9e00fcf8bf94c2608048536337a5a2982924e1
96749f5be9c5fd41ed7bfdfaa53b89e06a872524e076d4d008a0cd9a412dab58
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/fonts/flaticon/flaticon.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 563
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/magnific-popup.css?ver=1.5.8
66.29.146.165200 OK 1.7 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/magnific-popup.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash ce4ce941a89517d4a19cf7cc266ae0d3
a7c0aad584b8941245d195702b17add09a76736e
bbe19f2a0cae112988859afb12bed2ae6e494bb7608437d24273ceda23448503
GET /wp-content/themes/ecome/assets/css/magnific-popup.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1679
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/jquery.scrollbar.css?ver=1.5.8
66.29.146.165200 OK 2.9 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/jquery.scrollbar.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (682)
Hash a42096aa0bc38d9e5a8a16db3996faae
31f8ceb607349057299e0e7c429c70106582ea50
0f4c56205d31e27c4b7cdf71deb0ac34006a0a3cefff3a8261ae40f0ca18101d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/jquery.scrollbar.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2922
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/pe-icon-7-stroke.css?ver=1.5.8
66.29.146.165200 OK 1.7 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/pe-icon-7-stroke.css?ver=1.5.8
IP 66.29.146.165:0
Hash eafd532a9d530cbb91a75bd98d77b8db
9f90575082e9a0359928a277e681e467e20b02c7
a023d8531a89d481d1892417a04d983a4315ab508d8bc31eff0b044984bb2f16
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/pe-icon-7-stroke.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1683
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/jquery.growl.min.css?ver=1.5.8
66.29.146.165200 OK 628 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/jquery.growl.min.css?ver=1.5.8
IP 66.29.146.165:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (2115), with no line terminators
Hash e3fd66bc807e1548cc7d82279332748e
9037100976dfdc33c17ee65265c982b5fdebac92
98c8fa66dc17a3dd0f94692815fe70b3df4440e355df5f1ea917bdea25211269
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/jquery.growl.min.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 628
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21
66.29.146.165200 OK 1.1 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21
IP 66.29.146.165:0
Hash 263b70217f905feda4c01edde0b2737a
5ee9d3538967433d441e6aa357bf166724200523
1c82d8152cb3112b7df9b40a89ac28db20e51562266c13d392e8530fc06cd5ce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Wed, 31 Aug 2022 13:58:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1060
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/slick.min.css?ver=1.5.8
66.29.146.165200 OK 397 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/slick.min.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (1330), with no line terminators
Hash ac85c45abcc30f4d521928445ee2b369
66b69b56dfe4aebcdac67143b2a68af4e56af938
deab7d6997b99829c6a9434002f551f70aa16b55186fa961e8803da53e3c5d3e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/slick.min.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 397
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-buy-together/assets/vendors/jquery-lazy/jquery.lazy.min.js
66.29.146.165200 OK 2.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-buy-together/assets/vendors/jquery-lazy/jquery.lazy.min.js
IP 66.29.146.165:0
File type ASCII text, with very long lines (4890)
Hash f4e74ab6f9031ba1a684515ededc6b69
63c0630bbafec0944be7711333836bc6d0cce63e
ab2a7343e8743ec8ee62deb447aac87a1e528e92f1a609515b468907ab40b8c6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-buy-together/assets/vendors/jquery-lazy/jquery.lazy.min.js HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2206
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/chosen.min.css?ver=1.5.8
66.29.146.165200 OK 1.8 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/chosen.min.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (9686), with no line terminators
Hash 2958ae46507bb7ec8e452d96dfd883c8
80a4829d2bc8ebed50375dfd0d64551946a9f0f6
8f24dd1e8cc5cec76d59a20d82f5178c6a8859d9ab184335b076fb1999d95bbb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/chosen.min.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1823
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-buy-together/assets/js/frontend.js
66.29.146.165200 OK 2.5 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-buy-together/assets/js/frontend.js
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 3655a952f540b1aeed24d2019587b010
07de3e9836d30a9cb800e1a20ea4ea69260eb47c
83f8b53385240a52b8cbd01e2c085f245533cf7ca776221714fed5d9649bf493
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-buy-together/assets/js/frontend.js HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2538
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
66.29.146.165200 OK 4.0 kB URL HTTP/2 xpodeal.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 19:36:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/ecome-toolkit/includes/admin/live-search/live-search.js?ver=1.0
66.29.146.165200 OK 1.0 kB URL HTTP/2 xpodeal.com/wp-content/plugins/ecome-toolkit/includes/admin/live-search/live-search.js?ver=1.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (448), with CRLF line terminators
Hash 0fdf93ef794130a8ff86d9d37d3c79db
318c55f0470c22ea2851f91b8e0b7df2fe65274b
7795dae495cecc47118b46891c3a5875ad0a8ba4fde6dbae3c83dbf126da4b67
GET /wp-content/plugins/ecome-toolkit/includes/admin/live-search/live-search.js?ver=1.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1049
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/framework/includes/megamenu/css/frontend.css?ver=6.0.2
66.29.146.165200 OK 820 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/framework/includes/megamenu/css/frontend.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash b9a0e86f0f568c9ce0e5afafd2187756
c2d8102638a5f3e7f50fd8c4d5fcbdc095921c0e
6810bf8f1fad263198bc93aa2bf238a5d4cd69cfaa653929b3513fcc161c488e
GET /wp-content/themes/ecome/framework/includes/megamenu/css/frontend.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 820
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/style.css?ver=6.0.2
66.29.146.165200 OK 447 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/style.css?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (311)
Hash c21cce3033a53bf919417a764da2db46
10093a23a0a1df28a960dd2791f2fe933c4bbd0d
aadd1e224f122cc9ed23a25dc48b93234a3ea37f236a2744844f6a7a07aa89cc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/style.css?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Sun, 16 May 2021 18:11:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 447
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/fami-sales-popup/assets/js/frontend.js
66.29.146.165200 OK 1.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/fami-sales-popup/assets/js/frontend.js
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash a8540f20d16c7ed0a95fca629542f1c0
5ab2fe6aa08b3050b0e1d8b3561ccc160ef04e2e
113d6b2523198c8a921bc12fbb8262e27ebb5293d01c8e01a0f5c175c6e5a569
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/fami-sales-popup/assets/js/frontend.js HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1168
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.9.4
66.29.146.165200 OK 974 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.9.4
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (3037), with no line terminators
Hash fd8b126d3265cc6afc5b672273f78531
5058e579885cccf36c44bdeb5b7318bd75952af9
72da6709db061566cb5f67322f674a77f68acb69ac6181d37f9ca4a1bb7287b7
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 974
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.6.0
66.29.146.165200 OK 4.0 kB URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (34217)
Hash e00926a3c189b2f2396d96d90ac77785
f61219b1a1e4924051c4e5c7acb70cd925173bdb
30a6fd0e5a3610d5074e2a634513348ff8a5a92510d45c6c2621d6bda6b2fd27
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3952
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.6.0
66.29.146.165200 OK 321 B URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.6.0
IP 66.29.146.165:0
Hash 159e4731a0ffba6862ee2a1bbcc8a805
7fb2a5ca7a80d96187fda406d0a1b7db23867fa7
c6f102a76dc397d94cfbadcd292d64bb45acaa29b0391b41a9f1cc68c2274ae2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 321
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=6.9.4
66.29.146.165200 OK 857 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (3287), with no line terminators
Hash f91b0cde1c3ae9c4865dbe50b94b7e96
26c7baee70eca5d442f5f30a7c0ccd0a6187c105
224aecccc666e90a5607c1ee584952f275cae6c6f8cad50f9d9834d7499c4bd9
GET /wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Wed, 21 Oct 2020 03:38:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 857
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.9.4
66.29.146.165200 OK 3.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (9115)
Hash 66c388e07cfb57895688b3347ab7290b
f23bd7a31995b3b19924575f2afa297a29257856
3971f3ab5179d1f4f91d2c102f27c2bf1dac2c04e2f62ff3eae3ebfa8c28494e
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3245
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0
66.29.146.165200 OK 3.5 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with very long lines (14924), with no line terminators
Hash 8e3bd2af5dfce9709733e4adabb032ad
94aa210458d7103cecb401ef0a71100ea48c2ed7
a24331f6cb5f0d263a8aa7a78e9105ec5956f82162f30d718fd23fb325d7b669
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 18 Feb 2021 16:35:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3500
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=6.9.4
66.29.146.165200 OK 1.7 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (7887), with no line terminators
Hash 494afef7fdbd631433fe8b40049c9733
e927f43e6ee2f70854247363612dab1107c514ad
54b56f475540254274fa193380ab680e39913768d9a227660bd571bba3456b7f
GET /wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Wed, 11 Dec 2019 07:19:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1728
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
66.29.146.165200 OK 3.7 kB URL HTTP/2 xpodeal.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (12211), with no line terminators
Hash b3777786fbf0ac18aa59c687154a9db8
3f24b0cfae49dc3e70f149edaf203a661cd59c88
8e3993f3b5eb33611a7c40d80d1cb048b4329ebb9ad0d9e8eb583e48fda70bb5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Sep 2022 12:44:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3689
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
66.29.146.165200 OK 2.8 kB URL HTTP/2 xpodeal.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP 66.29.146.165:0
File type ASCII text, with very long lines (9680), with no line terminators
Hash 8a91034fce0e4a2464d2170d38d31382
f00c20cfcbd136ee9aa20d07085c10f470548fe4
1a8f0bcd2b76caf977b08ed30bdd29eb77405ca4c1fe2315b41f8fe2542f1528
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Sep 2022 12:44:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2799
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.9.4
66.29.146.165200 OK 677 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (2139), with no line terminators
Hash a43fc0dde8fdd69656ad0957e62849c7
4b07cf702ac8a770c8cbffc22b9a788b6e5389ba
1ce3d0493424870c81deec0ec41de0592d2af9f91cd8081cd40a1d7ea89b614f
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 18 May 2021 21:00:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 677
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.9.4
66.29.146.165200 OK 934 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (2938), with no line terminators
Hash cf25dd071a208312bdc07f34d2cee027
76119563119eaae392ecc8903c989d98d0b93002
8635ba2cad8f887e72779bd526f8738ff6343c74cba715caf2eddea383ba7ce6
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 24 Nov 2021 03:30:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 934
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.9.4
66.29.146.165200 OK 899 B URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (1668)
Hash 22d65ba38528349e705d912ce26bf8ac
c89ba006009043d93b88ff155b4fec8797330550
6253bcb85e4267ad3ba843145534e729ee2c1d7e85e5b4ab5b2e074ae636bca3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 20 Jan 2021 04:55:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 899
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.18.0
66.29.146.165200 OK 1.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.18.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (4602), with no line terminators
Hash 6a5cf02c457796835cd28c6197b3b064
c58cdd6ea85cc624e313c7cfec9ed2d27e609703
d596e6c774b8f750e18905d4279d8dc1adbe532b7b6faf90241e01eede68d44a
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.18.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 13:58:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1201
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-quick-view/assets/js/frontend.min.js?ver=1.19.0
66.29.146.165200 OK 875 B URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-quick-view/assets/js/frontend.min.js?ver=1.19.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (2014), with CRLF line terminators
Hash 5720e01542059f32467265876b344f35
7c7fc90b634d60337fb4beb8fad6155bb0c0b276
61b47b87d57ef0ae60ad79e8c3f3cd7fa16768aeff18768bbdda1066bdaa7f8a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-quick-view/assets/js/frontend.min.js?ver=1.19.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 13:49:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 875
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/threesixty.min.js?ver=1.5.8
66.29.146.165200 OK 2.4 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/threesixty.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (7483), with no line terminators
Hash 3d234ebc71b4ea68e11ed22f342fd1e4
125c27e8ae92594f53a48d193fdcc2d9312ea014
46736161821f04f57beb18ff6780bb8a9d52b981001ab549bb667f2d9e255dd6
GET /wp-content/themes/ecome/assets/js/libs/threesixty.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2422
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/jquery.scrollbar.min.js?ver=1.5.8
66.29.146.165200 OK 3.9 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/jquery.scrollbar.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (11879)
Hash 7630ab41f54e4ad0e1bf26dc8a1c04d9
ab7ede001162b62c69ec7c77d867575307968893
e32b7e1e903512a39a7314abe133e7f978cf8ec0ed05d3f68753714fb477a820
GET /wp-content/themes/ecome/assets/js/libs/jquery.scrollbar.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3892
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/countdown.min.js?ver=1.5.8
66.29.146.165200 OK 1.6 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/countdown.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (4136), with no line terminators
Hash c3311ba759bff377a93be2da014be69f
a0a469c5be2f8fa35e94c2340499ed10f419b5f4
474684481430cc300f2641dec9acdb58f6d1557bb3781255ce3f0aa75d0e143d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/countdown.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1590
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/lazyload.min.js?ver=1.5.8
66.29.146.165200 OK 3.4 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/lazyload.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (4890), with CRLF line terminators
Hash 43394eb4b396cacdc154a374f039ee4a
79845381a5a3e9ed6c4a4af08ea6c0f5111c6737
525e7d16a1478db4a960a3038c58df70d2cdb508ef5a4d9e4225d6d5724bd2e6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/lazyload.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3356
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/jquery.growl.min.js?ver=1.5.8
66.29.146.165200 OK 1.6 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/jquery.growl.min.js?ver=1.5.8
IP 66.29.146.165:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5797), with no line terminators
Hash 43a49723f88af3048eaa422ca65c5564
54c84dac91a0e25c7ef83a18370eb22dcaa877b1
bb4bb00e62002a74c2df9e6c3a0bac265894c9a020891e23fe6017e1a2a213db
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/jquery.growl.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1560
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/ecome-toolkit/includes/admin/mailchimp/mailchimp.min.js?ver=1.0
66.29.146.165200 OK 300 B URL HTTP/2 xpodeal.com/wp-content/plugins/ecome-toolkit/includes/admin/mailchimp/mailchimp.min.js?ver=1.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (726), with no line terminators
Hash f4b15f0fedc3e96575f0bd1cae5ed54e
cd77595f9187513e9a2f53f663ca26dc700dac42
d1a5c29582ad7cf999be8928e99afb42285f6310706531c84b7c4571c9b9faa9
GET /wp-content/plugins/ecome-toolkit/includes/admin/mailchimp/mailchimp.min.js?ver=1.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Mon, 01 Aug 2022 16:27:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 300
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/framework/includes/megamenu/js/frontend.js?ver=1.0.0
66.29.146.165200 OK 1.9 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/framework/includes/megamenu/js/frontend.js?ver=1.0.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (1077)
Hash 51169af3f427311db33c1494ba8652c1
aad09e5ceb6b98f6e04cca6d1f4da7d1ff3d9fbf
ca65a57f7288f276257ac139d778dee2d0d1e9588eaf7972c5d917e53fc6bfb1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/framework/includes/megamenu/js/frontend.js?ver=1.0.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1874
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=6.9.4
66.29.146.165200 OK 1.7 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=6.9.4
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with very long lines (6322), with no line terminators
Hash 9c56675b1e3db79804c16b978c50f296
fb27a61dc9588565546c88e72a545323060fc21a
5dc76185932b04ad3ac26b69e8446ca5e2b123ae412aa82f2f13dbdf0c5cbf9d
GET /wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1713
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.6.9.4
66.29.146.165200 OK 3.4 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.6.9.4
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (9536)
Hash eed261640a13b609653053d2a638f872
93cda65548c43a123c56258d2e8886f9b4a2c2b3
6a5412cadd9b2553341185b32a0614f4c45e400441a7852841a8d886fb0c2f6c
GET /wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3432
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.9.4
66.29.146.165200 OK 3.4 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (13887), with no line terminators
Hash 25fb50f4945fa93ea85568456a86fa97
0ea82027ad4720f101de9715adf4ad963a326207
c84cd16cc99c06eec7939713048efa3f35d176236b4c9740e3eb060c12791fb3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3436
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/wp-util.min.js?ver=6.0.2
66.29.146.165200 OK 646 B URL HTTP/2 xpodeal.com/wp-includes/js/wp-util.min.js?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (1305)
Hash 6545e92af6fa2c33aed6fb1d0492af5e
b95b4d49921004f3a23ea8d057beadd4d45a6d74
ef9475d7d2b07f279a49a8458afc74f865810087e299437ef355024b93929eb2
GET /wp-includes/js/wp-util.min.js?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Sat, 26 Jun 2021 00:20:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 646
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.6.9.4
66.29.146.165200 OK 1.0 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (2600)
Hash 58ae168dadba117e645a850bb22c9e48
b397d052c90ecf4b48209a86ecf72bbe90a0d87f
8adec06492eb0bb02580aef8f86d4a420997a8d56393d526785498e266d1af06
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 18 May 2021 21:00:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1041
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.11
66.29.146.165200 OK 12 kB URL HTTP/2 xpodeal.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.11
IP 66.29.146.165:0
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash dc07606c6f1719f22e60b5a66b6c83ee
0007da6b48940b57407d4345d997cdea4b062fc4
dfc4458610794e60eb66675406a99ffbfc5ece7ac2b6cc172050c32621aaf31a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.11 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 16:46:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12482
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/font-awesome.min.css?ver=1.5.8
66.29.146.165200 OK 6.6 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/font-awesome.min.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (30758), with no line terminators
Hash 7bf2a039d8c1c8bdac9e771b009ad318
b70aae17d4b99d0ef67df4a21363423e1aff2543
7618d0c2a6b4303a9223b40b5d4757131b8413fc8ecc0a7dc5a07c3402a8cc63
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/css/font-awesome.min.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6583
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
66.29.146.165200 OK 4.6 kB URL HTTP/2 xpodeal.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 66.29.146.165:0
File type ASCII text, with very long lines (15660)
Hash 0232689bd203f330529b36a437f41a68
9046583f7469ad38297969f10a9513eb895d5316
feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 15:26:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.6.0
66.29.146.165200 OK 12 kB URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (56243)
Hash bc62c79810f6d9ff2023a3ce01fb17e8
c176d3254f491913c5567d35c85d0d02c6c9300a
abe49ff5c57ab5013f8eac78076ef149837282fce42df3f0f526cb440e3d155b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11779
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6
66.29.146.165200 OK 5.4 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (21310), with no line terminators
Hash 33081d75af44148dbfd85f7f8f4382ff
a2bac4c76a6a40839a6682df66eb40cd8c4d470d
b8dad2c0f7d74cdfcf2b9f96a17f72886b64edab3e392f7d72df15e1c1ac3119
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5350
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.13.0
66.29.146.165200 OK 6.2 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.13.0
IP 66.29.146.165:0
File type HTML document, ASCII text, with very long lines (24951), with no line terminators
Hash a8cadbc3c514fca4b31fd8d98bd99922
503b0d92ee27b87f4a7f9c5163d25bbadd90bd38
79bf34585f2d00399b1eb5020da9085931f5cb56fdfe643d4db3713959a2e2f0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.13.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Sun, 19 Jun 2022 18:19:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6249
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/bootstrap.min.js?ver=1.5.8
66.29.146.165200 OK 5.3 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/bootstrap.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (19231), with no line terminators
Hash a947f50a94af5a31ca82dc99bc91385f
fcbbd45ed579b756148b399e5f6a2d7f1002314d
aec0420871f0a41b23bb2b9848fa6c7b01b8281898209597786b06b3ff97698b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/bootstrap.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5300
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/chosen.min.js?ver=1.5.8
66.29.146.165200 OK 6.3 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/chosen.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (28882), with no line terminators
Hash 0e65af36588d1db51d60ae82283e4646
256f31af54d1de3357e9f558b30edbc231fc91de
05e0dcbc1718752d450480d3c8d36bf7c600609515871de9ce68c0da31c15f41
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/chosen.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6300
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21
66.29.146.165200 OK 4.5 kB URL HTTP/2 xpodeal.com/wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21
IP 66.29.146.165:0
File type ASCII text, with very long lines (11827)
Hash ad837a8d18fb12f3db5d03cef2956caa
520179c7b4cd32f94386f4576e439e3689e18747
b6618604f7dadbad0b877cf727356465919707ceec7965c340adeca61d824b36
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 13:58:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4457
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/slick.min.js?ver=1.5.8
66.29.146.165200 OK 10 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/slick.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (46782), with no line terminators
Hash 42a176600acdaf90c34591ac79b597f2
26c44c764104877ab7c30e215cf62f39e5bc1ccf
d6f2eb1e0dabc9199d469b3cec024a30a8609272e6841016fe9b23186f9eb18a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/slick.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10319
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/libs/magnific-popup.min.js?ver=1.5.8
66.29.146.165200 OK 7.0 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/libs/magnific-popup.min.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (20087), with no line terminators
Hash 5b52c86b5ffcd4a52589460441cccee6
ffd38d960569603b3bfa83aac25efb62ef6fb2ea
e91168e8781c8fe362374bd4d4d267c0788964db1478c4a8fbea2129528d306a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/libs/magnific-popup.min.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6965
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0
66.29.146.165200 OK 5.6 kB URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (20418)
Hash c15318397253a9f8bc4e80fc9be51955
543b224eb0fce0d85b1290a1e20c3b2415be3a22
2d67bfb3628d93c140d563b4bc572f54da1e330fb8d54ff9035214607a5bde6d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5560
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/underscore.min.js?ver=1.13.3
66.29.146.165200 OK 7.2 kB URL HTTP/2 xpodeal.com/wp-includes/js/underscore.min.js?ver=1.13.3
IP 66.29.146.165:0
File type ASCII text, with very long lines (18876)
Hash 8f44fac7de7704cc9c42ca9cf95071b8
1fa95065580a736700586a6c6ba1e0c3304d301c
89d8fb5c9897186f5d8295777f8eecd5c9a8ec5a40b0e01b9afe3e6ff851a4a1
GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 28 Apr 2022 00:09:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7176
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/js/functions.js?ver=1.5.8
66.29.146.165200 OK 8.0 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/js/functions.js?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with CRLF line terminators
Hash fc45eb3af3274451954800d1d1ca6e60
2803e1dadb514eae02bf049eb2e629d998beb6cb
a9fd0e3a4b9ac5671243e3502d70156ddf326db2f3b699a20d6dc4b5c1043416
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/js/functions.js?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Fri, 21 May 2021 19:06:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8024
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.6.9.4
66.29.146.165200 OK 12 kB URL HTTP/2 xpodeal.com/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.6.9.4
IP 66.29.146.165:0
File type ASCII text, with very long lines (30938)
Hash 26ee07c645a18d43b915f888356868e8
67afa92b2d66c314451378e692b6b3bf278f9c75
369ed192b03b104959e6c16572b663c9017658a6c8687cc88ffa7e441a7d02c8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.6.9.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 23:16:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11613
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/css/style.css?ver=1.5.8
66.29.146.165200 OK 37 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/css/style.css?ver=1.5.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (904)
Hash c24ef7b09a3630fb50e8429a736c1235
976f993d3c37df224835a91459e3903a32acf91e
33a0ac1654e31a9c11fdeb731037870ff5a9c314ceedff8be6f35bc1fdc2efbb
GET /wp-content/themes/ecome/assets/css/style.css?ver=1.5.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Tue, 08 Jun 2021 04:20:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 36851
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
66.29.146.165200 OK 30 kB URL HTTP/2 xpodeal.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (65447)
Hash 34f918ada1fe4f01c5a4b90065bbc37a
a731f6ce2d413805e39ae45994012b1bd5ea1e2b
eba158d5ab26a5a54a3dcfcea1072c636f44e92fc2eb30a3f27cd5be3f891dfc
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Thu, 11 Mar 2021 01:37:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30273
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0
66.29.146.165200 OK 42 kB URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0
IP 66.29.146.165:0
File type ASCII text, with very long lines (65358)
Hash a42125daa1bf4835bd80f616b2f538ec
f6fbf48eec4c1e3d203d713ce29aa7e8a3742305
cf455434a5ed07a1fafa1052cd1fb1fa750957d2d25cec8284743d41179c8040
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: text/css
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 42005
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/uploads/2018/03/logo-1.png
66.29.146.165200 OK 33 kB URL HTTP/2 xpodeal.com/wp-content/uploads/2018/03/logo-1.png
IP 66.29.146.165:0
File type PNG image data, 429 x 115, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ea6ec0f426d44d0abc23c14dcfab852
c0e5b253f98c8d354afcce06e7a383601a72dbfd
e5b55344d430e21f411d3344e5781369e278fa00a4d66da5e005ed835c94eab2
GET /wp-content/uploads/2018/03/logo-1.png HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: image/png
last-modified: Wed, 03 Aug 2022 22:12:17 GMT
accept-ranges: bytes
content-length: 33352
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.8
66.29.146.165200 OK 46 kB URL HTTP/2 xpodeal.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.8
IP 66.29.146.165:0
File type ASCII text, with very long lines (42889)
Hash 7b6e082bde2cd00810b3413baa28da45
4b18394c3ab61e2dae4eae87b00cdc74f2339447
30fe548881461bdef9c96b8faf55eaeeb8759dcb83049beef418e939b9f965b0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.8 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 27 Jul 2022 16:46:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 45472
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.11
66.29.146.165200 OK 92 kB URL HTTP/2 xpodeal.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.11
IP 66.29.146.165:0
File type ASCII text, with very long lines (64268)
Hash b53538a16c908f348a97bd9418b8970b
29aec0d4185ab6cd2b9fd8ced8572a4ad0cb0d2e
94cf091b04cabc5a26f25c8a3bfbd23fcd08b6a0f6c13b0339ebecc4a663db2e
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.11 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/email/ali/li/ali1/ali/login.php?email=sales@flexi-van.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:51 GMT
content-type: application/javascript
last-modified: Wed, 27 Jul 2022 16:46:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 91616
date: Sat, 01 Oct 2022 19:09:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ecome.famithemes.com/wp-content/uploads/2018/03/tv-video-1.jpg?id=1468
18.164.68.109301 Moved Permanently 167 B URL HTTP/1.1 ecome.famithemes.com/wp-content/uploads/2018/03/tv-video-1.jpg?id=1468
IP 18.164.68.109:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /wp-content/uploads/2018/03/tv-video-1.jpg?id=1468 HTTP/1.1
Host: ecome.famithemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 01 Oct 2022 19:09:57 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://ecome.famithemes.com/wp-content/uploads/2018/03/tv-video-1.jpg?id=1468
X-Cache: Redirect from cloudfront
Via: 1.1 a455b0542ae02d17ddbe081579777502.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: 5Mm2T2PkwbjO-EigUKInpe0Lgne6vYD_YR_zfqti2eeuM1NZNhua2w==
ecome.famithemes.com/wp-content/uploads/2018/03/footer-bg.jpg?id=1273
18.164.68.109301 Moved Permanently 167 B URL HTTP/1.1 ecome.famithemes.com/wp-content/uploads/2018/03/footer-bg.jpg?id=1273
IP 18.164.68.109:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /wp-content/uploads/2018/03/footer-bg.jpg?id=1273 HTTP/1.1
Host: ecome.famithemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 01 Oct 2022 19:09:57 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://ecome.famithemes.com/wp-content/uploads/2018/03/footer-bg.jpg?id=1273
X-Cache: Redirect from cloudfront
Via: 1.1 a455b0542ae02d17ddbe081579777502.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: 2_tSAp8RtOZ3MDrtEFrV1FIVXAEDWoVYjH4yOeeih2TlFxIcv0OyHA==
ecome.famithemes.com/wp-content/uploads/2018/03/Cell-Phones-Accessories.jpg?id=1428
18.164.68.109301 Moved Permanently 167 B URL HTTP/1.1 ecome.famithemes.com/wp-content/uploads/2018/03/Cell-Phones-Accessories.jpg?id=1428
IP 18.164.68.109:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /wp-content/uploads/2018/03/Cell-Phones-Accessories.jpg?id=1428 HTTP/1.1
Host: ecome.famithemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 01 Oct 2022 19:09:57 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://ecome.famithemes.com/wp-content/uploads/2018/03/Cell-Phones-Accessories.jpg?id=1428
X-Cache: Redirect from cloudfront
Via: 1.1 fb211c90e9ef3584bea8fd177f57995a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: rc2IutUdcH7kauq8BWUhzMMXipvU0nYVrDYc94prQCVsitQqDj4oVA==
ecome.famithemes.com/wp-content/uploads/2018/03/Home-Audio-Theater-1.jpg?id=2817
18.164.68.109301 Moved Permanently 167 B URL HTTP/1.1 ecome.famithemes.com/wp-content/uploads/2018/03/Home-Audio-Theater-1.jpg?id=2817
IP 18.164.68.109:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /wp-content/uploads/2018/03/Home-Audio-Theater-1.jpg?id=2817 HTTP/1.1
Host: ecome.famithemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 01 Oct 2022 19:09:57 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://ecome.famithemes.com/wp-content/uploads/2018/03/Home-Audio-Theater-1.jpg?id=2817
X-Cache: Redirect from cloudfront
Via: 1.1 35f1076ba1ff613e428e9cf6a2f57580.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: KGkjhdQXnNq2p43cPd1X-WWLp5RDvIieKzed6Ij5reuPnhi-VIygWg==
ecome.famithemes.com/wp-content/uploads/2018/03/Headphones.jpg?id=1445
18.164.68.109301 Moved Permanently 167 B URL HTTP/1.1 ecome.famithemes.com/wp-content/uploads/2018/03/Headphones.jpg?id=1445
IP 18.164.68.109:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /wp-content/uploads/2018/03/Headphones.jpg?id=1445 HTTP/1.1
Host: ecome.famithemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 01 Oct 2022 19:09:57 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://ecome.famithemes.com/wp-content/uploads/2018/03/Headphones.jpg?id=1445
X-Cache: Redirect from cloudfront
Via: 1.1 c3ac810888cb46ee4166354c2171bcde.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: BUJT3dvHyQGG001piixQjj8fIcvFjB88GDARnx9jlwM0Fwj4FbbBYg==
xpodeal.com/wp-content/themes/ecome/assets/images/select-arrow.png
66.29.146.165200 OK 153 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/images/select-arrow.png
IP 66.29.146.165:0
File type PNG image data, 40 x 40, 4-bit colormap, non-interlaced\012- data
Hash e8d09d5a457ced998ca1a9b84170c021
0e126d8206a554e700b560d4027fdc7e33830c20
eb5780b5781a430db9ff9061e9457161b5b507e55cfddf13cb346516267be8d6
GET /wp-content/themes/ecome/assets/images/select-arrow.png HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/themes/ecome/assets/css/style.css?ver=1.5.8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:57 GMT
content-type: image/png
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-length: 153
date: Sat, 01 Oct 2022 19:09:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/fonts/HelveticaNeueLTStd-Roman.otf?v=1.0.4
66.29.146.165200 OK 29 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/fonts/HelveticaNeueLTStd-Roman.otf?v=1.0.4
IP 66.29.146.165:0
File type OpenType font data\012- data
Hash c50cafe27126364ceb9f08dfd666645f
611ec84275a93082e935456ab679e3f5c59f3124
ee554630913ac7b7359ea477479234f7366c546bbe9a1494ae686f24727701f7
GET /wp-content/themes/ecome/assets/fonts/HelveticaNeueLTStd-Roman.otf?v=1.0.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/themes/ecome/assets/css/style.css?ver=1.5.8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/otf
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-length: 29044
date: Sat, 01 Oct 2022 19:09:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/fonts/flaticon/Flaticon.woff
66.29.146.165200 OK 7.8 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/fonts/flaticon/Flaticon.woff
IP 66.29.146.165:0
File type Web Open Font Format, TrueType, length 7832, version 0.0\012- data
Hash 82218c29486a1d0f5c6475dceb46a6e0
f0ebbfd17c449bd6472bf6c0f3aa4c3694c85532
90159dcfb2e0dd4d1eea0321496bb4feea642d977b0b04bef0e43bb69a34db68
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ecome/assets/fonts/flaticon/Flaticon.woff HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/themes/ecome/assets/fonts/flaticon/flaticon.css?ver=1.5.8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:57 GMT
content-type: font/woff
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-length: 7832
date: Sat, 01 Oct 2022 19:09:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
108.138.212.162200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 108.138.212.162:0
Hash aad14fb64e6d82bd81717edadb0bbb09
0ee7a5aaabea7d849bb194127785ebb852595642
dfadeafc83bb08116115bb5b2059b111af072785e612782541972384803035ce
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 01 Oct 2022 19:09:57 GMT
Server: ECS (dcb/7FA4)
X-Cache: Miss from cloudfront
Via: 1.1 b71942f119bbacf26f360e10bcbe172a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: uPGiX_DohGPfcbKBmSBT35001hpfY5dsyrESdzRLjF1ftqcMRbEUNw==
ocsp.sca1b.amazontrust.com/
108.138.212.162200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 108.138.212.162:0
Hash aad14fb64e6d82bd81717edadb0bbb09
0ee7a5aaabea7d849bb194127785ebb852595642
dfadeafc83bb08116115bb5b2059b111af072785e612782541972384803035ce
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 01 Oct 2022 19:09:57 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 ce3edb24525b5cd14ad82bbb2327e8a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: 5Crr1NzJllz-oJYfD5rYxAbo6_xs9w5Aq_nU6F6iRkj8sOnkWfWxfA==
ecome.famithemes.com/wp-content/uploads/2018/03/footer-bg.jpg?id=1273
18.164.68.109200 OK 16 kB URL HTTP/2 ecome.famithemes.com/wp-content/uploads/2018/03/footer-bg.jpg?id=1273
IP 18.164.68.109:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1899x562, components 3\012- data
Hash 84b168daad5bd05562223d1fe29eb6e5
0d811834ca06d3c97ff852bc6395940b73941915
fb599fcd11041f9424b2f67b5516a008236a90454e342512396e066f31e1f226
GET /wp-content/uploads/2018/03/footer-bg.jpg?id=1273 HTTP/1.1
Host: ecome.famithemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 15750
last-modified: Wed, 20 Jul 2022 19:49:55 GMT
x-amz-version-id: JTdaLEokqgzu.zEnloPobPbmpsnJ1jlZ
accept-ranges: bytes
server: AmazonS3
date: Sat, 01 Oct 2022 12:43:14 GMT
etag: "84b168daad5bd05562223d1fe29eb6e5"
x-cache: Hit from cloudfront
via: 1.1 c3ac810888cb46ee4166354c2171bcde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P4
x-amz-cf-id: QHhJKNk_6bnqMR685KezNwDLo6Gmi8RX4e0CuzNoWuSSHKF0jZqnJg==
age: 23204
X-Firefox-Spdy: h2
ecome.famithemes.com/wp-content/uploads/2018/03/Cell-Phones-Accessories.jpg?id=1428
18.164.68.109200 OK 1.1 kB URL HTTP/2 ecome.famithemes.com/wp-content/uploads/2018/03/Cell-Phones-Accessories.jpg?id=1428
IP 18.164.68.109:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1c74ee34c3bae47628389db79fb62632
87f2ffbbcdd755c6c7a6c2e044322d6714a95adc
f169aede21649b699f50cb77ff263d131183397cfa4f077a2296dc99add5af0a
GET /wp-content/uploads/2018/03/Cell-Phones-Accessories.jpg?id=1428 HTTP/1.1
Host: ecome.famithemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1099
last-modified: Wed, 20 Jul 2022 19:49:19 GMT
x-amz-version-id: Fn0r4nql6KAFFtMAVFNbebF2slw8KVwT
accept-ranges: bytes
server: AmazonS3
date: Sat, 01 Oct 2022 19:09:58 GMT
etag: "1c74ee34c3bae47628389db79fb62632"
x-cache: Error from cloudfront
via: 1.1 c3ac810888cb46ee4166354c2171bcde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P4
x-amz-cf-id: 7xzKuyE1xwSAmN-dF3LKggFeyZesbbgVSvoDBdXhBp8b-M8HH_oR1A==
age: 37264
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/fonts/HelveticaNeueLTStd-Lt.otf?v=1.0.4
66.29.146.165200 OK 29 kB URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/fonts/HelveticaNeueLTStd-Lt.otf?v=1.0.4
IP 66.29.146.165:0
File type OpenType font data\012- data
Hash 4f27a4e5a731a020f10179da42fd4df2
eff7122718f03dbc8f13085ce4d3589e1e4ea503
4f6a454460e1cbc10c50d4cc9c556bb7e5cf36bebacd6eff87a22fa3ef35eafe
GET /wp-content/themes/ecome/assets/fonts/HelveticaNeueLTStd-Lt.otf?v=1.0.4 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/themes/ecome/assets/css/style.css?ver=1.5.8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/otf
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-length: 28980
date: Sat, 01 Oct 2022 19:09:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ecome.famithemes.com/wp-content/uploads/2018/03/tv-video-1.jpg?id=1468
18.164.68.109200 OK 32 kB URL HTTP/2 ecome.famithemes.com/wp-content/uploads/2018/03/tv-video-1.jpg?id=1468
IP 18.164.68.109:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 721x469, components 3\012- data
Hash 2ee4773ec8d286e773ae323ecad86a52
1b3d6a7ede87c97b13199dd92478d83c833982ff
c6b80cbf0a6e4bebfc434cad3b85f0cd098c8447d302240b6c56cd6403377fa3
GET /wp-content/uploads/2018/03/tv-video-1.jpg?id=1468 HTTP/1.1
Host: ecome.famithemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32489
last-modified: Wed, 20 Jul 2022 19:49:56 GMT
x-amz-version-id: SVepS7YXb9YnGBlN3gsJEGMQPrfpoElX
accept-ranges: bytes
server: AmazonS3
date: Sat, 01 Oct 2022 19:09:58 GMT
etag: "2ee4773ec8d286e773ae323ecad86a52"
x-cache: Hit from cloudfront
via: 1.1 c3ac810888cb46ee4166354c2171bcde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P4
x-amz-cf-id: zHDcIo1DhD3WtWAfKMt0-IhFV9T1IiHf_K1BuDZm5Hjf67DcqqiMxA==
age: 37264
X-Firefox-Spdy: h2
xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-solid-900.woff2
66.29.146.165200 OK 0 B URL HTTP/2 xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-solid-900.woff2
IP 66.29.146.165:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.6.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:57 GMT
content-type: font/woff2
last-modified: Wed, 27 Jul 2022 16:46:19 GMT
accept-ranges: bytes
content-length: 75760
date: Sat, 01 Oct 2022 19:09:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
xpodeal.com/wp-content/themes/ecome/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
66.29.146.165200 OK 0 B URL HTTP/2 xpodeal.com/wp-content/themes/ecome/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 66.29.146.165:0
GET /wp-content/themes/ecome/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: xpodeal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://xpodeal.com/wp-content/themes/ecome/assets/css/font-awesome.min.css?ver=1.5.8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 08 Oct 2022 19:09:57 GMT
content-type: font/woff2
last-modified: Thu, 06 Sep 2018 19:44:00 GMT
accept-ranges: bytes
content-length: 77160
date: Sat, 01 Oct 2022 19:09:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2